A flaw in OpenSSH up to version 10.6 causes sandboxing to be inadvertently disabled when sshd is built with the macOS 27 SDK or newer. This loss of sandboxing can allow an attacker to run privileged or otherwise restricted code with higher privileges than intended, potentially leading to privilege escalation or execution of arbitrary binaries on the host system. The weakness is aligned with CWE-653, non‑trusted workload execution from user space.

The vulnerability affects OpenSSH versions leading up to and including 10.6 on OpenBSD installations that use the macOS 27 (or later) software development kit during compilation. Older OpenSSH releases and those built with earlier SDKs are not impacted.

The CVSS assessment rates the flaw as low severity (3.1). The exploit probability is unknown as no EPSS data is available, and the vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is via a remote sshd connection from a client that can supply a workload; the attacker would need to trigger the sandbox loss condition, which currently requires specific build-time SDK usage and is therefore unlikely to be exploited in the wild without advanced configuration changes.