Attackers Exploit OpenSSH Password Bypass Affecting Alpine Linux

Attackers are exploiting an OpenSSH password-authentication bypass affecting Alpine Linux and some other systems built on musl, creating an immediate security issue for operators who allow password logins.

Successful exploitation has been observed, and 20 attempts have been logged. Together, those indicators show activity around the weakness, with evidence of both attempts and successful use.

This makes the flaw relevant to operators relying on that login method.

The affected group extends beyond Alpine to some systems built on musl. The description covers some such systems, not the entire group.

Alpine operators can install the patch and restart SSH, or disable password authentication. Patching updates the affected service, while disabling password authentication removes password logins as an access method. Both options address the password-login exposure created by the bypass.