Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-47913

28
FAUCET Score

CVE-2025-47913 describes a denial-of-service vulnerability affecting Go SSH clients, where receiving an unexpected SSH_AGENT_SUCCESS message can cause the client process to panic and terminate prematurely. This high-severity vulnerability (CVSS 7.5) can be exploited remotely with low attack complexity, leading to a complete loss of availability for the client. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
< 0.43.0CPE matchmatch criteria
cpe:2.3:a:go:ssh:*:*:*:*:*:go:*:*

CVSS Data

CVSS version used by this source: 3.1

7.5HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.63%
Probability of exploitation in next 30 days
EPSS Percentile
46.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0063 is in the 23rd percentile among its peer group of 51,551 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (110)

gopatch availablevia ghsa
Product: golang.org/x/crypto/ssh/agentFixed in: 0.43.0
microsoftpatch availablevia msrc
Product: azl3 docker-buildx 0.14.0-7 on Azure Linux 3.0Fixed in: 0.14.0-8
microsoftpatch availablevia msrc
Product: azl3 packer 1.9.5-10 on Azure Linux 3.0Fixed in: 1.9.5-11
microsoftpatch availablevia msrc
Product: azl3 kubevirt 1.5.0-5 on Azure Linux 3.0Fixed in: 1.5.0-6
microsoftpatch availablevia msrc
Product: azl3 docker-compose 2.27.0-5 on Azure Linux 3.0Fixed in: 2.27.0-6
microsoftpatch availablevia msrc
Product: cbl2 packer 1.9.5-15 on CBL Mariner 2.0Fixed in: 1.9.5-16
microsoftpatch availablevia msrc
Product: cbl2 moby-compose 2.17.3-11 on CBL Mariner 2.0Fixed in: 2.17.3-12
microsoftpatch availablevia msrc
Product: azl3 telegraf 1.31.0-10 on Azure Linux 3.0Fixed in: 1.31.0-11
microsoftpatch availablevia msrc
Product: 20667-17084Fixed in: 0.14.0-8
microsoftpatch availablevia msrc
Product: 20566-17084Fixed in: 1.9.5-11
microsoftpatch availablevia msrc
Product: 20656-17084Fixed in: 1.5.0-6
microsoftpatch availablevia msrc
Product: 19334-17084Fixed in: 2.27.0-6
microsoftpatch availablevia msrc
Product: 20538-17086Fixed in: 1.9.5-16
microsoftpatch availablevia msrc
Product: 20666-17086Fixed in: 2.17.3-12
microsoftpatch availablevia msrc
Product: 19343-17084Fixed in: 1.31.0-11
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.15Fixed in: rhacm2/volsync-rhel9:sha256:a90157ccc6fafba463ccc0b4dc7ec9911909152dbe7efed9d794da65ccc76050
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Ceph Storage 8Fixed in: rhceph/grafana-rhel9:sha256:1dc2620596822eb28fb997bc51ad2ecb352011e63f4c54fb650bc3e4c8009c4e
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-data-science-pipelines-argo-argoexec-rhel9:sha256:6bb341d0ebec1f7776283939f5b3eb9768a7d04b9bf817d6248c7df7e3fecee7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9:sha256:85b1677537ed8fc1471f0053e1d6e281023ed4685c635de78fdbc00b1b63539b
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift GitOps 1.17Fixed in: openshift-gitops-1/argocd-agent-rhel8:sha256:8a07b1dcc21b99093a21936da2959f4ff9dbe9b2a138609594ec1cbfab06d096
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift GitOps 1.17Fixed in: openshift-gitops-1/argocd-rhel9:sha256:80f845196a254e186385aa8c0217bfd857a1832357bc309875b6b82a835eadee
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift GitOps 1.18Fixed in: openshift-gitops-1/argocd-agent-rhel8:sha256:a6141b3b5508dc9690ae15ebc3efd33a3fc71382a7dd449a954ffe181f8cd138
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenStack Platform 16.2Fixed in: rhosp-rhel8/osp-director-agent:sha256:26005fbf7d5e2b62db9368a3ec4858c22c653e45abe328feda7dc26e3039b355
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenStack Platform 16.2Fixed in: rhosp-rhel8/osp-director-operator:sha256:74254effff84e9bfe9bca9dcf1d1b9c1cccbe5e874fbd6c34c86c257670480d8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenStack Platform 17.1Fixed in: rhosp-rhel9/osp-director-agent:sha256:a618bbff08e2c106afa08a7daf100b51ac7ae53fe932fa2611087df303cc79f0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenStack Platform 17.1Fixed in: rhosp-rhel9/osp-director-operator:sha256:262d9d9ee1f5093a467168981f3bd952836ca227801acaca506cbcf496a38c8c
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Ceph Storage 7.1Fixed in: ceph-2:18.2.1-381.el8cp
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3.12Fixed in: quay/quay-builder-rhel8:sha256:0ca5a583ca7ff0161ed35deeae94be78adc74100d0343b778f1edf5b77e90925
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3.13Fixed in: quay/quay-builder-rhel8:sha256:6b8ae3a48b6237c6c689f1e62b3bb4eea645b5a3797a4e09e4a308f84f0c9ee7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3.15Fixed in: quay/quay-rhel8:sha256:a8daa359ab7a0bc9722b25fb87aa6fd253506632640bfe7f31c9c92868421ecb
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3.16Fixed in: quay/quay-builder-rhel9:sha256:5f0df245dd2d0cdc6da5601305172300afe0dd706114b8c737b6a1517f931ff5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3.9Fixed in: quay/quay-builder-rhel8:sha256:c644998824e04ecf279deae25a22cce6c48d8bca44755f76eb4abacf17052519
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Trusted Artifact Signer 1.2Fixed in: rhtas/gitsign-rhel9:sha256:4c59990381ce313cd845257e95fd2e910b3d84459c5b3c3aa09fce954a328101
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Trusted Artifact Signer 1.3Fixed in: rhtas/gitsign-rhel9:sha256:3c39718e61d13648afcb5b0f5741aa771caf9b2f8c52e4af9dfa0635d5b05894
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3.1Fixed in: quay/quay-builder-rhel8:sha256:6f893e3537bdc8ac814c5726f5594f4da820973d2246d3b399687d406e9a3952
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: buildah-2:1.41.8-1.el10_1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: podman-7:5.6.0-11.el10_1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: container-tools:rhel8-8100020260114090145.afee755d
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: buildah-2:1.41.8-1.el9_7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: podman-6:5.6.0-11.el9_7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.6 Extended Update SupportFixed in: podman-5:5.4.0-18.el9_6
View patch
redhatpatch availablevia redhat_api
Product: Builds for Red Hat OpenShift 1.6.3Fixed in: openshift-builds/openshift-builds-controller-rhel9:sha256:8e676677a0c02b23f8fadf3e96a6cc0329ac5758087d7413011d3adb5e40123b
View patch
redhatpatch availablevia redhat_api
Product: Builds for Red Hat OpenShift 1.6.3Fixed in: openshift-builds/openshift-builds-git-cloner-rhel9:sha256:288a32807d964dc2f5800dd659ac6f52e97056c6333714305a931027e9650d07
View patch
redhatpatch availablevia redhat_api
Product: Builds for Red Hat OpenShift 1.6.3Fixed in: openshift-builds/openshift-builds-image-bundler-rhel9:sha256:8c6aada94d75445b65fcfda86e0639cbd3bc06d2c96c1639442d4a6c1181bdcc
View patch
redhatpatch availablevia redhat_api
Product: Builds for Red Hat OpenShift 1.6.3Fixed in: openshift-builds/openshift-builds-image-processing-rhel9:sha256:a68e3d9055d17e2732cf14d6acc3bd0018eae883471041e3a77e66e7c985cf27
View patch
redhatpatch availablevia redhat_api
Product: Builds for Red Hat OpenShift 1.6.3Fixed in: openshift-builds/openshift-builds-waiters-rhel9:sha256:97b80445bd1e8c9702ac61463ba432fcab7f66e0ea16da9fdea5d3e4e4fb1354
View patch
redhatpatch availablevia redhat_api
Product: Builds for Red Hat OpenShift 1.6.3Fixed in: openshift-builds/openshift-builds-webhook-rhel9:sha256:77aa55c3379a978d4dd505999c3193f0b5b0f8a9f2890a83471c712cb529981e
View patch
redhatpatch availablevia redhat_api
Product: DevWorkspace Operator 0.39Fixed in: devworkspace/devworkspace-project-clone-rhel9:sha256:d18263cba6fc9a51955d6cb704444473955caeeb180d9ff60c8267ad00539e0d
View patch
redhatpatch availablevia redhat_api
Product: DevWorkspace Operator 0.39Fixed in: devworkspace/devworkspace-rhel9-operator:sha256:775be225ba4a9ffdd926f27ea9e4e87afdb399768bae202ff60a483b5795c0f5
View patch
redhatno patchvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/cluster-image-set-controller-rhel8
redhatno patchvia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: flightctl
redhatno patchvia redhat_api
Product: Red Hat Ceph Storage 6Fixed in: grafana
redhatno patchvia redhat_api
Product: Red Hat Ceph Storage 9Fixed in: grafana
redhatno patchvia redhat_api
Product: Red Hat Edge Manager previewFixed in: flightctl
redhatno patchvia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhacm2/acm-flightctl-api-rhel9
redhatno patchvia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhacm2/acm-flightctl-periodic-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift Virtualization 4Fixed in: container-native-virtualization/virt-artifacts-server
redhatno patchvia redhat_api
Product: Red Hat OpenShift Virtualization 4Fixed in: container-native-virtualization/virt-artifacts-server-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift Virtualization 4Fixed in: kubevirt
redhatno patchvia redhat_api
Product: Red Hat OpenStack Platform 16.2Fixed in: golang-googlecode-go-crypto
redhatno patchvia redhat_api
Product: OpenShift ServerlessFixed in: openshift-serverless-clients
redhatno patchvia redhat_api
Product: OpenShift ServerlessFixed in: openshift-serverless-1/kn-plugin-func-func-util-rhel9
redhatno patchvia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines-client
redhatno patchvia redhat_api
Product: OpenShift Developer Tools and ServicesFixed in: openshift4/ose-jenkins
redhatno patchvia redhat_api
Product: OpenShift Developer Tools and ServicesFixed in: ocp-tools-4/jenkins-rhel9
redhatno patchvia redhat_api
Product: OpenShift Developer Tools and ServicesFixed in: ocp-tools-4/jenkins-rhel8
redhatno patchvia redhat_api
Product: OpenShift Developer Tools and ServicesFixed in: ocp-tools-4/jenkins-agent-base-rhel9
redhatno patchvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/hive-rhel9
redhatno patchvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/hive-rhel8
redhatno patchvia redhat_api
Product: Multicluster Engine for KubernetesFixed in: multicluster-engine/cluster-image-set-controller-rhel9
redhatno patchvia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/multicluster-operators-subscription-rhel9
redhatno patchvia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhem/flightctl-alert-exporter-rhel9
redhatno patchvia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhem/flightctl-alertmanager-proxy-rhel9
redhatno patchvia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhem/flightctl-api-rhel9
redhatno patchvia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhem/flightctl-cli-artifacts-rhel9
redhatno patchvia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhem/flightctl-db-setup-rhel9
redhatno patchvia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhem/flightctl-periodic-rhel9
redhatno patchvia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhem/flightctl-telemetry-gateway-rhel9
redhatno patchvia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhem/flightctl-userinfo-proxy-rhel9
redhatno patchvia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhem/flightctl-worker-rhel9
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: buildah
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-docker-builder
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-docker-builder-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-dpu-cni-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-dpu-daemon-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-dpu-intel-ipu-p4sdk-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-dpu-intel-ipu-vsp-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-dpu-rhel9-operator
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-olm-rukpak-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: podman
redhatno patchvia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/argocd-rhel8
redhatno patchvia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/gitops-rhel8
redhatno patchvia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/gitops-rhel8-operator
redhatno patchvia redhat_api
Product: Red Hat OpenShift Virtualization 4Fixed in: container-native-virtualization/cluster-network-addons-operator-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift Virtualization 4Fixed in: container-native-virtualization/ocp-virt-validation-checkup-rhel9
redhatend of lifevia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhacm2/acm-flightctl-worker-rhel9
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/acm-flightctl-worker-rhel9
redhatend of lifevia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/gitops-operator-bundle
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/acm-flightctl-periodic-rhel9
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/acm-flightctl-api-rhel9
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Virtualization 4Fixed in: container-native-virtualization/cluster-network-addons-operator
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: flightctl
redhatend of lifevia redhat_api
Product: Red Hat OpenStack Platform 16.2Fixed in: rhosp-rhel8-tech-preview/osp-director-provisioner
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Virtualization 4Fixed in: container-native-virtualization/passt-network-binding-plugin-cni-rhel9
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: ose-azure-acr-image-credential-provider
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Virtualization 4Fixed in: container-native-virtualization/passt-network-binding-plugin-sidecar-rhel9
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: golang
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: microshift
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-console
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-console-rhel9

Vendor Advisories (3)

goGHSA-56w8-48fp-6mgvhigh

golang.org/x/crypto/ssh/agent has a potential denial of service

Nov 14, 2025
redhatCVE-2025-47913Important

golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS

Nov 13, 2025
microsoft2025-Nov/CVE-2025-47913Important

Potential denial of service in golang.org/x/crypto/ssh/agent

Nov 11, 2025

References

github.com / advisories/GHSA-56w8-48fp-6mgv
Third Party Advisory
go.dev / cl/700295
Patch
go.dev / issue/75178
ExploitIssue Tracking
pkg.go.dev / vuln/GO-2025-4116
Vendor Advisory