The bug is like a joke.
On Alpine Linux, type 257 to 1024 characters of anything and you get root. 💀
00:00
Readers added context
Exploitation requires specific conditions, not just typing a long string anywhere on Alpine: sshd built without PAM, password auth enabled, a target account with a '*' password field, and another local account with $5$/$6$ hashes. Root login also must be explicitly permitted. alpinelinux.org/posts/2026-11-…openssh.org/releasenotes.h…
We're still investigating the trouble with @heyhey and now with @basecamp for some of our users. We will keep you posted here and at our Status Site: 37status.com. We're so sorry, folks.