In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.

• azl3 openssh 9.8p1-9 on Azure Linux 3.0

• azl3 openssh 9.8p1-10 on Azure Linux 3.0

SecurityAlert records field-level changes from the point we begin following a bulletin. Earlier vendor changes may not have a field-by-field record.

1. Sep 27, 2026 at 11:11 PM UTC
   • Added affected products: azl3 openssh 9.8p1-10 on Azure Linux 3.0.
   • Added fixed versions: 9.8p1-10.
   • The vendor changed its remediation guidance.

1. Aug 14, 2026 at 6:45 PM UTC
   Published by Microsoft Security Response Center

   The publication date reported by the vendor.

2. Aug 21, 2026 at 7:10 AM UTC
   Added to SecurityAlert

   We collected the advisory from the official source.

3. Sep 13, 2026 at 1:47 AM UTC
   Updated by Microsoft Security Response Center

   The vendor changed the advisory after it was first published.

4. Oct 28, 2026 at 3:45 AM UTC
   Confirmed at the source

   Our collector saw this advisory during a later source check.