OpenSSH flaw lets attackers log into password-disabled Linux accounts

BleepingComputerNovember 5, 2026Vulnerabilities Identity Endpoint

A newly disclosed OpenSSH vulnerability dubbed "*sshole" allows attackers to log in to certain Alpine Linux and other musl-based Linux accounts that are configured to block password authentication, simply by entering an oversized password. [...]

Summary from BleepingComputer.

Read the full article at BleepingComputer

Explained

The technology and terms in this story. Learn more

TechnologyOpenSSHThe most widely used SSH implementation, shipped with Linux, macOS and Windows.

OpenSSH flaw lets attackers log into password-disabled Linux accounts

Explained

More in Vulnerabilities

Get root on a musl Linux system by slamming it with an overly long password

AI Agents Got Root on Linux via 948 Kernel Flaws in OpenAI Research

OpenAI releases GPT-6 Cyber, and promises this one stays within 'rules of engagement'

Rubyonrails security advisory (AV26-1129)

Vulnerability Scans for Older Cisco IOS Vulnerability / Opt-Out Headers, (Thu, Nov 5th)