5.3

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2025-47914

CVE-2025-47914: golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read

SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2025-47914

CVE-2025-47914:

5.3

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
golang.org/x/crypto	go	< 0.45.0

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in the golang.org/x/crypto/ssh/agent package, where the server component does not properly validate the length of incoming messages when adding a new identity. The analysis of the patch commit f91f7a7c31bf90b39c1de895ad116a2bacc88748 reveals the root cause.

The function agent.parseConstraints is responsible for parsing constraints associated with a new SSH key. One of these constraints, agentConstrainLifetime, is expected to be followed by a 4-byte unsigned integer. The vulnerable code directly attempted to read these 4 bytes (binary.BigEndian.Uint32(constraints[1:5])) without first checking if the input constraints slice was long enough. If an attacker sends a specially crafted message where the constraints slice is shorter than 5 bytes (e.g., just []byte{agentConstrainLifetime}), this operation results in an out-of-bounds read, triggering a panic.

This vulnerable function is called by agent.(*server).serveAgent, which is the main loop handling client requests. When serveAgent receives an agentAddIdentity request, it extracts the constraints from the message and passes them directly to parseConstraints. Therefore, an attacker can trigger the panic by connecting to the SSH agent and sending a malformed 'add identity' request, leading to a denial of service as the agent's request-handling goroutine crashes. The fix was to add a length check in parseConstraints before attempting to read the lifetime value.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.