OpenSSH 10.6 ships faster releases after AI finds security bugs
OpenSSH 10.6 Released
OpenSSH 10.6, released October 6, 2026, addresses security issues including a compression side-channel and stricter path validation. The team notes that AI-assisted bug reports are increasingly common and that bugs found by AI are often independently rediscovered, so they will release more frequently. New features include hybrid post-quantum signatures and agent socket path options.
We have seen a number of cases where a security bug identified by AI tools is subsequently independently discovered by a different researcher. This suggests that adversaries who do not report bugs to OSS projects are likely to be able to discover these bugs too.