Weakness in frp's SSH Tunnel Gateway Allows Unauthenticated Access

CVE-2026-73564

What is CVE-2026-73564?

The SSH Tunnel Gateway in the frp proxy service is vulnerable to an improper input validation flaw. Specifically, an attacker can exploit this vulnerability by sending a malformed SSH exec channel request. The attack manipulates the length of the payload, bypassing the expected bounds checks. As a result, this could lead to a panic in the TunnelServer, causing it to crash and terminate all active tunnels used by legitimate users. Mitigation is available in version 0.70.1, which addresses this input validation issue effectively.

References