CVE-2026-39831
Public on 2026-05-22
Modified on 2026-05-22
Description
The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior, return a "no-touch-required" extension in Permissions.Extensions from PublicKeyCallback.
CVSS v3 Base Score
See breakdown
Affected Packages
| Platform | Package | Release Date | Advisory | Status |
|---|---|---|---|---|
| Amazon Linux 2 - Core | amazon-cloudwatch-agent | Pending Fix | ||
| Amazon Linux 2023 | amazon-cloudwatch-agent | Pending Fix | ||
| Amazon Linux 2 - Aws-nitro-enclaves-cli Extra | amazon-ecr-credential-helper | Not Affected | ||
| Amazon Linux 2 - Docker Extra | amazon-ecr-credential-helper | Not Affected | ||
| Amazon Linux 2 - Ecs Extra | amazon-ecr-credential-helper | Not Affected | ||
| Amazon Linux 2023 | amazon-ecr-credential-helper | Not Affected | ||
| Amazon Linux 2 - Core | amazon-ssm-agent | Pending Fix | ||
| Amazon Linux 2023 | amazon-ssm-agent | Pending Fix | ||
| Amazon Linux 2 - Core | cni-plugins | Not Affected | ||
| Amazon Linux 2023 | cni-plugins | Not Affected | ||
| Amazon Linux 2 - Aws-nitro-enclaves-cli Extra | containerd | Pending Fix | ||
| Amazon Linux 2 - Docker Extra | containerd | Pending Fix | ||
| Amazon Linux 2 - Ecs Extra | containerd | Pending Fix | ||
| Amazon Linux 2023 | containerd | Pending Fix | ||
| Amazon Linux 2023 | credentials-fetcher | Not Affected | ||
| Amazon Linux 2 - Core | cri-tools | Not Affected | ||
| Amazon Linux 2 - Aws-nitro-enclaves-cli Extra | docker | Pending Fix | ||
| Amazon Linux 2 - Docker Extra | docker | Pending Fix | ||
| Amazon Linux 2 - Ecs Extra | docker | Pending Fix | ||
| Amazon Linux 2023 | docker | Pending Fix | ||
| Amazon Linux 2 - Ecs Extra | ecs-init | Not Affected | ||
| Amazon Linux 2023 | ecs-init | Not Affected | ||
| Amazon Linux 2023 | git-lfs | Pending Fix | ||
| Amazon Linux 2 - Core | golang | Not Affected | ||
| Amazon Linux 2023 | golang | Not Affected | ||
| Amazon Linux 2023 | golang-github-burntsushi-toml | Not Affected | ||
| Amazon Linux 2023 | golang-github-burntsushi-toml-test | Not Affected | ||
| Amazon Linux 2023 | golang-github-cpuguy83-md2man | Not Affected | ||
| Amazon Linux 2 - Core | golist | Not Affected | ||
| Amazon Linux 2023 | golist | Not Affected | ||
| Amazon Linux 2023 | libcap | Not Affected | ||
| Amazon Linux 2 - Core | nerdctl | Pending Fix | ||
| Amazon Linux 2023 | nerdctl | Pending Fix | ||
| Amazon Linux 2 - Aws-nitro-enclaves-cli Extra | oci-add-hooks | Not Affected | ||
| Amazon Linux 2 - Docker Extra | oci-add-hooks | Not Affected | ||
| Amazon Linux 2 - Ecs Extra | oci-add-hooks | Not Affected | ||
| Amazon Linux 2023 | oci-add-hooks | Not Affected | ||
| Amazon Linux 2 - Core | rclone | Pending Fix | ||
| Amazon Linux 2023 | rclone | Pending Fix | ||
| Amazon Linux 2 - Aws-nitro-enclaves-cli Extra | runc | Not Affected | ||
| Amazon Linux 2 - Docker Extra | runc | Not Affected | ||
| Amazon Linux 2 - Ecs Extra | runc | Not Affected | ||
| Amazon Linux 2023 | runc | Not Affected | ||
| Amazon Linux 2 - Docker Extra | runfinch-finch | Pending Fix | ||
| Amazon Linux 2023 | runfinch-finch | Pending Fix | ||
| Amazon Linux 2 - Docker Extra | soci-snapshotter | Not Affected | ||
| Amazon Linux 2023 | soci-snapshotter | Not Affected | ||
| Amazon Linux 2023 | yq | Not Affected |
CVSS Scores
| Score Type | Score | Vector | |
|---|---|---|---|
| Amazon Linux | CVSSv3 | 7.4 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N |