topic Re: OpenSSH CVE-2025-61984 on PANOS in Next-Generation Firewall Discussions

OpenSSH CVE-2025-61984 on PANOS

S.Chougule552919 — Mon, 11 May 2026 05:41:00 GMT

Hi All,

Does anyone know if CVE-2025-61984 for OpenSSH applies to PANOS. I think it would not but could not find any knowledgebase article or community discussion related to this.

Thanks in advance.

Sarvesh

Re: OpenSSH CVE-2025-61984 on PANOS

DanielS.Romero — Tue, 12 May 2026 22:19:44 GMT

Hello @S.Chougule552919

According to PANW information:

"CVE-2025-61984 PAN-OS is not affected as PAN-OS does not use the ProxyCommand option in the SSH client configuration."

Reference: PAN-SA-2025-0006 Informational Bulletin: Impact of OSS CVEs in PAN-OS

Best Regards,

Re: OpenSSH CVE-2025-61984 on PANOS

JayGolf — Tue, 12 May 2026 22:50:32 GMT

Hi @S.Chougule552919 ,

PAN-OS is not affected by CVE-2025-61984. Palo Alto Networks has an informational advisory for OSS CVEs in PAN-OS, and this CVE is listed there as not applicable because PAN-OS does not use the ProxyCommand option in the SSH client configuration.

You can reference the PANW Security Advisory here: PAN-SA-2025-0006 and search the page for additional CVEs and which products are affected.