CVE-2025-47913: Go SSH

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.

Affected products

• Go SSH: before 0.43.0 (fixed in 0.43.0)

Published 2025-11-13. Last modified 2026-06-17.