CVE-2026-43798: apple swiftnio_ssh

CVSS 9.8 (critical) · published 2026-08-20

A single crafted SSH message gives an unauthenticated network attacker an out-of-bounds stack write of attacker-controlled length and content against any application built on swift-nio-ssh. This vulnerability is addressed in swift-nio-ssh version 0.14.1.

Affected products (NVD): apple swiftnio_ssh

Fixed in (NVD): 0.14.1

Weakness: CWE-121

Source: NVD CVE-2026-43798

References

• https://github.com/apple/swift-nio-ssh/security/advisories/GHSA-998x-vgvp-xwpc

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.