SSH Client Vulnerability in Go Programming Language by Google

CVE-2025-47913

What is CVE-2025-47913?

In the Go programming language, a flaw exists in the SSH client where it can panic and terminate unexpectedly upon receiving an SSH_AGENT_SUCCESS response when a typed input is anticipated. This behavior can lead to a disruption in service for applications relying on the SSH protocol, raising significant concerns for developers and users. It is crucial for users of affected Go versions to implement available patches and updates to mitigate this issue and ensure the stability of their applications.

References