CVE-2026-68930 | Eugeny russh up to 0.62.4 Handler Callbacks encrypted.rs server_read_authenticated input validation

A vulnerability was found in Eugeny russh up to 0.62.4. It has been classified as very critical. Impacted is the function server_read_authenticated of the file russh/src/server/encrypted.rs of the component Handler Callbacks. This manipulation causes improper input validation.

This vulnerability is handled as CVE-2026-68930. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.