VDB
CLEANSTART-2026-QJ89068
CLEANSTART-2026-QJ89068
PUBLISHED
SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| CleanStart | external-secrets-fips | 0, 0, 0 |
Exploit Intelligence
- scan.openvex.json (github-poc)
- scan.openvex.json (github-poc)
- CHANGELOG-v1.73.14.yml (github-poc)
- CHANGELOG-v1.73.14.yml (github-poc)
- 2026.xml (github-poc)
- 2026.xml (github-poc)
- 2026.xml (github-poc)
- 2026.xml (github-poc)
Timeline
- Jan 29, 2026 CVE Updated
- Jan 30, 2026 CVE Published
References
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-QJ89068.json vendor-advisory
- https://osv.dev/vulnerability/CVE-2020-8912 url
- https://osv.dev/vulnerability/CVE-2025-47913 url
- https://osv.dev/vulnerability/CVE-2025-47914 url
- https://osv.dev/vulnerability/CVE-2025-58181 url
- https://osv.dev/vulnerability/GHSA-f6x5-jh6r-wrfv url
- https://osv.dev/vulnerability/GHSA-j5w8-q4qc-rx2x url
- https://nvd.nist.gov/vuln/detail/CVE-2020-8912 url
- https://nvd.nist.gov/vuln/detail/CVE-2025-47913 url
- https://nvd.nist.gov/vuln/detail/CVE-2025-47914 url
- https://nvd.nist.gov/vuln/detail/CVE-2025-58181 url
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-QJ89068 advisory
- https://osv.dev/vulnerability/GHSA-F6X5-JH6R-WRFV url
- https://osv.dev/vulnerability/GHSA-J5W8-Q4QC-RX2X url