CVE-2026-56624

A flaw was found in Apache MINA SSHD (server-side). During user authentication, the server's OpenSSH user certificate validation process failed to properly check for or validate unsupported options like 'force-command' or 'verify-required' embedded within a user's certificate. This oversight could allow an authenticated user to bypass intended restrictions and execute commands beyond those specified in their certificate, potentially leading to unauthorized actions on the server.

This vulnerability is rated as an Important impact on Red Hat products because an authenticated remote user can completely bypass intended execution restrictions, escalating privileges beyond assigned boundaries to run arbitrary commands supported by the server. In Red Hat environments such as OpenShift Developer Tools and Red Hat build of Apache Camel, the underlying Apache MINA SSHD library provides embedded SSH connectivity for service endpoints. Exploitation requires that the target service is configured to accept OpenSSH user certificates and that the connecting party possesses a validly signed certificate issued by a trusted authority.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.