Saved SSH Credentials Exposure to Low-Privileged User

Successful exploitation allows a low-privileged local user to obtain saved SSH credentials. Depending on what is stored, this could expose usernames, passwords, private keys, passphrases, or other SSH authentication material, enabling unauthorized access to remote systems, credential reuse, lateral movement, and compromise of additional infrastructure reachable with the recovered credentials.

Until vendor-specific remediation is available, restrict local access to affected systems, minimize the number of low-privileged accounts, avoid storing reusable SSH credentials where possible, enforce strong filesystem and secret-store permissions, rotate any potentially exposed SSH credentials, and monitor for unauthorized access to SSH configuration files, key material, and credential storage locations. If saved SSH passwords or keys may have been exposed, replace them and review authorized_keys and related access paths on downstream systems.