Vulnerability record · CVE-2025-47913 · published 13 November 2025

CVE-2025-47913: Go ssh vulnerability

GGo · Ssh

SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.

7.5 CVSS 3.1 High EPSS 0.62% · top 52.2% CWE-617 · CWE-617

7.5CVSS 3.1 base score

0.62%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

4References, 1 tagged exploit

17 Jun 2026Last modified by NVD

Description

SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

GSsh Go

References

Link	Tags
https://github.com/advisories/GHSA-56w8-48fp-6mgv	Third Party Advisory
https://go.dev/cl/700295	Patch
https://go.dev/issue/75178	ExploitIssue Tracking
https://pkg.go.dev/vuln/GO-2025-4116	Vendor Advisory

Track CVE-2025-47913 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2025-22869Go ssh allocation without limits vulnerabilitySSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly,…EPSS 0.94%26 Feb 2025

Source: NIST National Vulnerability Database (record CVE-2025-47913), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.