CVE-2026-44405

A flaw was found in Paramiko, a Python implementation of the SSHv2 protocol. The rsakey.py module allows the use of the SHA-1 cryptographic hash algorithm, which is known to have security weaknesses. An attacker on the same local network, with significant effort, could potentially exploit this to achieve a limited compromise of data integrity.

This vulnerability is rated as Low severity because exploitation requires an adjacent network position and substantial computational effort to conduct collision attacks that only produce a minor integrity impact. Within Red Hat products, Paramiko is predominantly packaged inside containerized execution environments and automation tooling as a Python SSH client. Standard deployment models isolate management traffic and utilize hardened host configurations, greatly diminishing the feasibility of practical network-level attacks.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.