A vulnerability, which was classified as problematic, has been found in libssh up to 0.11.1. Affected by this issue is the function
privatekey_from_file
. The manipulation leads to uninitialized pointer.
This vulnerability is handled as CVE-2025-4878. Access to the local network is required for this attack. There is no exploit available.
It is recommended to upgrade the affected component.