Vulnerability That Lets Hackers SSH Into Linux Devices Is Under Active Exploitation

A critical vulnerability known as *sshole allows attackers to gain unauthenticated privileged SSH access to Linux systems that use OpenSSH with the musl library under specific configurations. Exploited actively by threat group GT10, the flaw enables rapid intrusion and installation of a backdoor called TAC Agent, facilitating system control and persistence. OpenSSH has released a fix, and users are urged to update promptly to prevent further compromise.

https://arstechnica.com/security/2026/11/vulnerability-that-lets-hackers-ssh-into-linux-devices-is-under-active-exploitation/