Security agency: Alpine SSH password bypass vulnerability has been successfully exploited

A password-authentication bypass vulnerability affecting SSH on some Alpine Linux systems has been successfully exploited, according to security firm GreyNoise, which began tracking scanning and exploitation attempts against the flaw on November 6. Fellow security firm Previdian recorded 20 exploitation attempts from 13 distinct IP addresses across four sensors between November 6 and 8, though those observations do not confirm that targets were vulnerable or that the attempts succeeded. Alpine is advising operators to install the patched OpenSSH package for their version and restart the SSH service, while those unable to update can disable password authentication and restart the service instead. The flaw matters because SSH is the primary remote-access channel for countless Linux servers and containers, and a bypass of password authentication could expose affected hosts to unauthorized access. What to watch next is whether exploitation attempts translate into confirmed compromises and how quickly Alpine operators apply the OpenSSH fix and restart SSH.