New: Corgea AI Pentesting — autonomous penetration testing in hours, not weeks
Start for Free
UNKNOWN Go

Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

GO-2026-5033 · CVE-2026-46598 · GHSA-9m57-25v3-79x9

Published · Modified

Description

For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used.

References

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes