Attackers Exploit Alpine SSH Password-Bypass Flaw

Alpine Linux's OpenSSH package is being actively exploited via a password-bypass flaw, with GreyNoise confirming successful attacks and Previdian recording 20 attempts against exposed hosts. The vulnerability allows attackers to authenticate without valid credentials, putting Alpine-based containers and servers at risk. Operators must patch the openssh package and restart the SSH service, or disable password authentication as a workaround. The flaw matters because Alpine's minimal image underpins a large share of containerized infrastructure, so unpatched instances widen the attack surface. What to watch next is whether exploitation attempts accelerate and whether downstream image maintainers ship rebuilt containers with the fix.