The vulnerability in OpenSSH’s sshd allows the GSSAPIAuthentication state to be incorrectly persisted across successive authentication attempts. This flaw means that information about a prior authentication session can leak into a later one, potentially exposing details to an attacker who can observe or influence the authentication stream. The weakness is rooted in improper handling of authentication state (CWE-669) and the use of uninitialized data (CWE-488).

The issue impacts OpenBSD OpenSSH installations running any version earlier than 10.6. Users still running those releases are at risk, while versions 10.6 and newer are not affected.

The CVSS score of 2.2 indicates a low severity rating, and the EPSS score of less than 1% shows a very low probability that this flaw is being actively exploited. The vulnerability is not listed in the CISA KEV catalog, further suggesting that it currently poses a limited threat. The likely attack vector is remote, originating from the SSH port when GSSAPIAuthentication is enabled, and would require an attacker to send crafted authentication packets to exploit the state persistence. However, the impact is confined to information disclosure and does not provide a full authentication bypass.