Do Son OpenSSH (before 10.1) has a flaw (CVE-2025-61984) that allows RCE when ProxyCommand is used. Attackers exploit control characters in usernames to inject commands.
ProxyCommand
Uncover the stealthy techniques threat actors are using: LNK files and SSH commands in advanced cyberattacks.
CVE-2023-51385 security vulnerability, with a CVSS score of 9.8, threatened the very core of its secure channel operations.