一、漏洞信息
漏洞编号：CVE-2026-39828
漏洞归属组件：crypto
漏洞归属分支：默认分支
漏洞归属的版本：v0.45.0
漏洞修复版本: 0.52.0
CVSS分值：
BaseScore： 8.8 High
Vector： CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
漏洞简述：
When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. Returning non-nil Permissions with PartialSuccessError now results in a connection error.
漏洞公开时间：2026-05-22 04:16:22
漏洞创建时间：2026-06-24 02:55:21
漏洞详情参考链接：
https://nvd.nist.gov/vuln/detail/CVE-2026-39828
一、漏洞信息
漏洞编号：CVE-2026-39828
漏洞归属组件：crypto
漏洞归属分支：默认分支
漏洞归属的版本：v0.45.0
漏洞修复版本: 0.52.0
CVSS分值：
BaseScore： 8.8 High
Vector： CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
漏洞简述：
When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. Returning non-nil Permissions with PartialSuccessError now results in a connection error.
漏洞公开时间：2026-05-22 04:16:22
漏洞创建时间：2026-06-24 02:55:21
漏洞详情参考链接：
https://nvd.nist.gov/vuln/detail/CVE-2026-39828