# New OpenSSH Vulnerability

Source: [Schneier on Security](https://www.schneier.com/blog/archives/2026/11/new-openssh-vulnerability.html) · 2026-11-10 · Security
Page: https://themorning.dev/story/new-openssh-vulnerability-903ec867ebe5cc11
Kind: security · Impact: high

## In brief

- A newly disclosed OpenSSH flaw involving musl, dubbed "*sshole", affects Alpine Linux and other musl-based systems.
- Attackers can log in to accounts configured to block password authentication by exploiting the flaw.
- According to Schneier on Security, the flaw has been in the code for about a decade.

## Why it matters

If you run OpenSSH on Alpine or another musl-based Linux, accounts you have locked to key-only or no-password login may not be as protected as you expect.

## Coverage

- [New OpenSSH Vulnerability](https://www.schneier.com/blog/archives/2026/11/new-openssh-vulnerability.html) — Schneier on Security, 2026-11-10

Tags: openssh, musl, alpine-linux, security, authentication

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev