Denial of Service Vulnerability in ShellHub SSH Gateway

CVE-2026-44425

What is CVE-2026-44425?

ShellHub, a centralized SSH gateway, has a vulnerability in its device list endpoint prior to version 0.24.2. This issue arises when user-controlled identifiers in the name field are accepted in the base64-encoded filter query and sort_by parameters. These parameters are passed to the database layer without appropriate validation, allowing any authenticated user to create malicious payloads. Such payloads can cause the database aggregation or query to fail, leading to an HTTP 500 response with no error message. This lack of rate limiting exacerbates the potential for denial of service, enabling attackers to disrupt the API's functionality.

References