← Vulnerability feed

Vulnerability record · CVE-2023-46446 · published 14 November 2023

CVE-2023-46446: Asyncssh project asyncssh insecure direct object reference vulnerability

Asyncssh Project · Asyncssh

An issue in AsyncSSH before 2.14.1 allows attackers to control the remote end of an SSH client session via packet injection/removal and shell emulation, aka a "Rogue Session Attack."

6.8 CVSS 3.1 Medium EPSS 0.87% · top 42.9% CWE-639 · Insecure direct object reference
6.8CVSS 3.1 base score
0.87%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
15References
17 Jun 2026Last modified by NVD

Description

An issue in AsyncSSH before 2.14.1 allows attackers to control the remote end of an SSH client session via packet injection/removal and shell emulation, aka a "Rogue Session Attack."

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html
https://github.com/advisories/GHSA-c35q-ffpf-5qpm
https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst
https://github.com/ronf/asyncssh/security/advisories/GHSA-c35q-ffpf-5qpm Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ME34ROZWMDK5KLMZKTSA422
https://security.netapp.com/advisory/ntap-20231222-0001/
https://www.terrapin-attack.com
http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html
https://github.com/advisories/GHSA-c35q-ffpf-5qpm
https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst
https://github.com/ronf/asyncssh/security/advisories/GHSA-c35q-ffpf-5qpm Third Party Advisory
https://lists.debian.org/debian-lts-announce/2024/09/msg00042.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ME34ROZWMDK5KLMZKTSA422
https://security.netapp.com/advisory/ntap-20231222-0001/
https://www.terrapin-attack.com

Track CVE-2023-46446 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2018-7749Asyncssh project asyncssh improper authentication vulnerabilityThe SSH server implementation of AsyncSSH before 1.12.1 does not properly check whether authentication is completed before processing other requests.…EPSS 1.7%8.2CVE-2026-45309Asyncssh project asyncssh path traversal vulnerabilityAsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio frame…EPSS 0.59%5.9CVE-2023-48795SSH Terrapin attack downgrades channel integrity in OpenSSH and many SSH implementationsThe SSH transport protocol with certain OpenSSH extensions mishandles the handshake and sequence numbers, letting a remote attacker omit packets from…EPSS 93%analysed5.9CVE-2023-46445Asyncssh project asyncssh insufficient verification of data authenticity vulnerabilityAn issue in AsyncSSH before 2.14.1 allows attackers to control the extension info message (RFC 8308) via a man-in-the-middle attack, aka a "Rogue Ext…EPSS 0.59%8.4CVE-2026-55255Langflow IDOR in responses endpoint allows cross-user flow executionLangflow before 1.9.1 has an insecure direct object reference in the /api/v1/responses endpoint. An authenticated attacker can supply another user's …KEVEPSS 0.89%analysed

Source: NIST National Vulnerability Database (record CVE-2023-46446), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.