# CVE-2026-48859: SSH server timing side-channel in ssh_auth:check_password/3 allows unauthenticated username enumeration

Status: published. Published: 2026-06-10. Updated: 2026-11-11.

Observable Timing Discrepancy vulnerability in Erlang/OTP ssh (ssh_auth, ssh_options modules) allows unauthenticated remote username enumeration via timing side-channel in password authentication.

When the SSH daemon is configured with the user_passwords or password option, ssh_auth:check_password/3 performs a PBKDF2-SHA256 computation with 600,000 iterations (~300ms) for valid usernames, but returns immediately (~0ms) for invalid usernames via the ssh_options:get_password_option/2 path. This timing difference is detectable in a single authentication attempt and allows an unauthenticated attacker to distinguish valid from invalid usernames.

The user_passwords and password options are documented as intended for test purposes; the recommended alternative is pwdfun, which is not affected by this vulnerability.

This vulnerability is associated with program files lib/ssh/src/ssh_auth.erl and lib/ssh/src/ssh_options.erl.

This issue affects OTP from OTP 29.0 before OTP 29.0.2, corresponding to ssh from 6.0 before 6.0.1.

## Remediation

- workaround: * Use the pwdfun option instead of user_passwords for password authentication. The pwdfun callback gives full control over timing behavior and is not affected by this vulnerability. Implementations should take care to execute in approximately constant time regardless of username validity.
* Restrict SSH port access to trusted networks only via firewall rules, reducing the set of potential attackers who can perform timing measurements. (source: CNA: EEF)
- fix: The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches. (source: CNA: EEF) — https://github.com/erlang/otp/commit/c342092ef4b369bb409d5b71ac8fd83bab74aedf

## Affected products and versions

- Erlang / OTP (otp): ≥ 29.0; < 29.0.2 (affected, otp). Source: CNA: EEF
- Erlang / OTP (ssh): ≥ 6.0; < 6.0.1 (affected, otp). Source: CNA: EEF
- Erlang / OTP (erlang/otp): ≥ 032d1bc9491a3975c68faf9bc7776115d6ae3005; < c342092ef4b369bb409d5b71ac8fd83bab74aedf (affected, git). Source: CNA: EEF

## Severity and prioritization

- CVSS 4.0: 6.3 (medium); CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N; source: CNA: EEF

- CISA KEV: No listing in collected sources

- EPSS: 0.35% as of 2026-11-10; percentile 29.44%

- SSVC: exploitation none; automatable yes; technical impact partial; source ADP: CISA-ADP

- Weaknesses: CWE-208

## Exploit evidence

No exploit evidence in collected sources. This is not proof of no exploitation.

## References

- https://github.com/erlang/otp/security/advisories/GHSA-3w6p-vwhf-wvp4 (CNA: EEF; vendor-advisory, related)

- https://cna.erlef.org/cves/CVE-2026-48859.html (CNA: EEF; related)

- https://osv.dev/vulnerability/EEF-CVE-2026-48859 (CNA: EEF; related)

- https://www.erlang.org/doc/system/versions.html#order-of-versions (CNA: EEF; x_version-scheme)

- https://github.com/erlang/otp/commit/032d1bc9491a3975c68faf9bc7776115d6ae3005 (CNA: EEF; related)

- https://github.com/erlang/otp/commit/c342092ef4b369bb409d5b71ac8fd83bab74aedf (CNA: EEF; patch)

## Provenance

- CNA: EEF: https://www.cve.org/CVERecord?id=CVE-2026-48859; retrieved 2026-11-11; source updated 2026-11-11

- FIRST EPSS: https://api.first.org/data/v1/epss?cve=CVE-2026-48859; retrieved 2026-11-11; source updated Not reported

Revision: 33eda6a2a1fe05d551685734441a1183478b8cec582caee72ca57d5d244b2362

Canonical: https://y2.dev/cve/CVE-2026-48859

## Agent and API access

Public CVE pages, Markdown, and JSON are free to read without an account or API key.

- Public catalog: https://y2.dev/cve/index.json. Follow nextCursor with the same search, filters, sort, and limit (1–100). A null cursor marks the end.

- WebMCP: search_cve_disclosures, get_cve_disclosure, get_cve_page_markdown, get_y2_cve_access. Available in compatible browsers.

- Cyber API: https://api.y2.dev/api/v2/cyber/cves and https://api.y2.dev/api/v2/cyber/cves/{cveId}.

- Y2 Pro or Elite: create a workspace API key with the intel:cyber scope and send Authorization: Bearer <Y2_API_KEY>. Setup: https://y2.dev/docs/api/create-key.

- x402: Pay per request without an account or API key. Omit Authorization, read the HTTP 402 PAYMENT-REQUIRED challenge, validate its current requirements, and retry with PAYMENT-SIGNATURE through an authorized payment client. These browser tools never make payments. Guide: https://y2.dev/docs/api/x402.

- OpenAPI: https://y2.dev/api/openapi.yaml. Agent access metadata: https://y2.dev/cve/agent.json.

Collected public records only. Check source status for coverage and freshness.