CVE-2026-44405 PUBLISHED

Assigner: mitre
Reserved: 05.05.2026 Published: 05.05.2026 Updated: 05.05.2026

In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.

Metrics

CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
CVSS Score: 3.4

Product Status

Vendor Paramiko
Product Paramiko
Versions Default: unaffected
  • affected from 0 to a4489456b6f65281e172380cc4826cee5e851dbb (excl.)

References

Problem Types

  • CWE-327 Use of a Broken or Risky Cryptographic Algorithm CWE