{"id":"CVE-2026-94423","summary":"Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host key against known_hosts","details":"Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host key against known_hosts.\n\nconnect reports success as soon as ssh_connect returns SSH_OK. libssh leaves the known-hosts check to the application, and this binding never makes it, so the strict_hostkeycheck and knownhosts options are set on the session and then decide nothing.\n\nPassword, agent and public-key authentication, channel and SFTP operations all run on a session whose peer was never identified, so an attacker who can redirect the connection receives the password when password authentication is used, and commands and data sent over the session.","modified":"2026-10-22T10:46:33.868963420Z","published":"2026-10-21T21:22:48.593Z","database_specific":{"cna_assigner":"CPANSec","cwe_ids":["CWE-322"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/94xxx/CVE-2026-94423.json"},"references":[{"type":"WEB","url":"http://www.openwall.com/lists/oss-security/2026/10/21/29"},{"type":"WEB","url":"https://cpan.org/modules"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/94xxx/CVE-2026-94423.json"},{"type":"PACKAGE","url":"https://github.com/Getty/p5-net-libssh"},{"type":"FIX","url":"https://github.com/Getty/p5-net-libssh/commit/29f509aacddb4b282ac9eb716d5ab326686d09a4.patch"},{"type":"ADVISORY","url":"https://metacpan.org/release/GETTY/Net-LibSSH-0.004/changes"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94423"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/getty/p5-net-libssh","events":[{"introduced":"0"},{"fixed":"3ce362aee769d3cb2375152e8c0b106295c58b03"},{"fixed":"29f509aacddb4b282ac9eb716d5ab326686d09a4"}],"database_specific":{"extracted_events":[{"range":[{"introduced":"0"},{"fixed":"0.004"}],"source":"AFFECTED_FIELD","strategy":"StandardRange"},{"range":[{"fixed":"29f509aacddb4b282ac9eb716d5ab326686d09a4"}],"source":"REFERENCES_COMMIT"}]}}],"versions":["0.003","0.002","0.001"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-94423.json"}}],"schema_version":"1.9.0"}