Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot

Threat actors are exploiting a recently disclosed OpenSSH security flaw that allows sign-ins to accounts without passwords. The vulnerability, known as SSHole, affects Linux systems running OpenSSH on the musl C library with Pluggable Authentication Modules disabled. It has a CVSS score of 8.1 and is tracked as CVE-2026-123158. According to Previdian, hackers are attempting to exploit this flaw. The vulnerability can be used to gain root access, as demonstrated by a honeypot experiment.