Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2026-90623 Details

ANALYZED

This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.

Description

A weakness has been identified in andreashappe cochise up to 0.4.1. Affected is the function asyncssh.connect of the file src/cochise/ssh_connection.py of the component SSH Host Key Handler. Executing a manipulation can lead to improper certificate validation. The attack may be launched remotely. The attack requires a high level of complexity. The exploitability is told to be difficult. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Metrics

CVSS 3.x Severity and Vector Strings:

VolerionCVSS-B:5.4 MEDIUMVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

CNA: [email protected]CVSS-B:3.7 LOWVector:CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://github.com/andreashappe/cochise/	[email protected]	Source CodeVendor
https://github.com/andreashappe/cochise/issues/13	[email protected]	ExploitIssue TrackingRemedyTechnical AnalysisVendor
https://vuldb.com/cve/CVE-2026-90623	[email protected]	AdvisoryPermission Required
https://vuldb.com/submit/914815	[email protected]	Issue TrackingPermission Required
https://vuldb.com/vuln/403205	[email protected]	AdvisoryPermission Required
https://vuldb.com/vuln/403205/cti	[email protected]	Content Wall

see all 6 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-287	Improper Authentication	[email protected]
CWE-295	Improper Certificate Validation	[email protected]

Affected Products

Product	Versions
andreashappe cochise	<= 0.4.1 (semver)
CPE No CPEs found in CPE dictionary for this product. Remediation Workaround:low effort Enable host key verification by removing `known_hosts=None` and using a managed `known_hosts` file or prompting the operator to verify new keys. Workaround:low effort Sanitize SSH output before LLM ingestion by escaping or removing instruction-like patterns and using structured prompting to separate tool output from system instructions. Workaround:low effort Add a command validation layer between LLM output and execution to deny patterns for exfiltration (e.g., `scp`, `curl`, `wget`, `nc`) and require confirmation for sensitive operations. Workaround:low effort Separate stderr from stdout so error output does not blend into the LLM context.

Product

Versions

andreashappe cochise

<= 0.4.1 (semver)

CPE

No CPEs found in CPE dictionary for this product.

Remediation

Workaround:low effort
Enable host key verification by removing `known_hosts=None` and using a managed `known_hosts` file or prompting the operator to verify new keys.
Workaround:low effort
Sanitize SSH output before LLM ingestion by escaping or removing instruction-like patterns and using structured prompting to separate tool output from system instructions.
Workaround:low effort
Add a command validation layer between LLM output and execution to deny patterns for exfiltration (e.g., `scp`, `curl`, `wget`, `nc`) and require confirmation for sensitive operations.
Workaround:low effort
Separate stderr from stdout so error output does not blend into the LLM context.

Change History

2 change records found show changes

Date	Action	Recorded By
Sep 14, 2026	CVE Modified	CISA-ADP
Sep 14, 2026	New CVE Received	[email protected]