CVE-2025-47913Patch(go / ssh)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch go ssh systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.

0.5/ 10 priority

Sources & remediation

Exploit / PoC references
Weakness type (CWE)
CWE-617

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • ssh

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 1 signal
  • Peaked 1d ago at 1 mentions (2026-03-11); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
Products
ssh

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-03-11: 1Mentions · 2026-06-16: 1Patch / Workaround · 2026-03-11: 1Patch / Workaround · 2026-06-16: 1Technical Details · 2026-06-16: 103-1106-16
Signal classification1 categories
Patch
2100.0%
Referenced assets1 URL
Full discourse2 posts
  • GCP Weekly@gcpweekly
    Patch

    This addresses the following vulnerabilities: CVE-2025-58188 CVE-2025-58187 CVE-2026-24051 CVE-2025-68119 CVE-2025-61731 CVE-2025-61729 CVE-2025-61726 CVE-2025-47913 CVE-2025-4674 N/A Security fixes for apigee-prometheus-adapter 16/19

    Post summary

    The announcement lists several CVEs and notes that security fixes have been released for apigee-prometheus-adapter 16/19, with no additional exploitation details.

    1000097
    1.8K followersView on X
  • ThreatCluster@threatcluster
    Patch

    SUSE released fixes for kubevirt 1.6 and 1.7 addressing CVE-2025-47911, CVE-2025-47913 and CVE-2025-47914 privilege escalation and denial-of-service bugs in embedded Go components, Linuxsecurity reported. https://threatcluster.io/cluster/critical-vulnerabilities-in-suse-kubevirt-and-opensuse-trivy-ce749196

    Post summary

    SUSE has released patches for CVE‑2025‑47911, CVE‑2025‑47913, and CVE‑2025‑47914, which caused privilege escalation and denial‑of‑service issues in kubevirt 1.6 and 1.7’s embedded Go components.

    0000061
    349 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appgossh-go-

Explore more