Warpgate is a remote-access and credential-management platform whose vulnerability profile concentrates in a single, narrowly scoped product that serves as a gateway for privileged session control and user authentication. The durable signal is the product's identity and access-control role, with recurring weaknesses centered on resource exhaustion and throttling, authentication bypass, CSRF, cryptographic signature verification, and authorization logic—classes that reflect the authentication and session-management demands of a credential intermediary. Live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Warpgate Project over time
Signals from CVEs in this vendor scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-42189HIGH Russh is a Rust SSH client & server library. Prior to version 0.60.1, a pre-authentication denial-of-service vulnerability exists in the server's keyboard-interactive authenticatio | May 8, 2026 | 7.5 | 30 | NO | NO |
CVE-2026-44347MEDIUM Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.23.3, the SSO flow does not validate the state parameter, which makes it possible for an attacker | May 12, 2026 | 6.5 | 26 | NO | NO |
CVE-2023-37268HIGH Warpgate is an SSH, HTTPS and MySQL bastion host for Linux that doesn't need special client apps. When logging in as a user with SSO enabled an attacker may authenticate as an othe | Jul 14, 2023 | 8.8 | 24 | NO | NO |
CVE-2023-43660HIGH Warpgate is a smart SSH, HTTPS and MySQL bastion host for Linux that doesn't need special client apps. The SSH key verification for a user can be bypassed by sending an SSH key off | Sep 27, 2023 | 8.1 | 23 | NO | NO |
CVE-2025-54804MEDIUM Russh is a Rust SSH client & server library. In versions 0.54.0 and below, the channel window adjust message of the SSH protocol is used to track the free space in the receive buff | Aug 5, 2025 | 6.5 | 22 | NO | NO |
CVE-2024-43410HIGH Russh is a Rust SSH client & server library. Allocating an untrusted amount of memory allows any unauthenticated user to OOM a russh server. An SSH packet consists of a 4-byte big- | Aug 21, 2024 | 7.5 | 22 | NO | NO |
CVE-2023-48712HIGH Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. In affected versions there is a privilege escalation vulnerability through a non-admin user's account. Limit | Nov 24, 2023 | 8.8 | 22 | NO | NO |
Signals from CVEs in this vendor scope (7 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Warpgate Project.
Media articles that mention a CVE ID that affects a product developed by Warpgate Project — matched by CVE ID, not by vendor name.