OpenSSH CVE-2025-61984 on PANOS

[S.Chougule552919]

Hi All,

Does anyone know if CVE-2025-61984 for OpenSSH applies to PANOS. I think it would not but could not find any knowledgebase article or community discussion related to this.

Thanks in advance.

Sarvesh

NGFW 

[DanielS.Romero]

Hello @S.Chougule552919 

According to PANW information:

"CVE-2025-61984 PAN-OS is not affected as PAN-OS does not use the ProxyCommand option in the SSH client configuration."

Reference: PAN-SA-2025-0006 Informational Bulletin: Impact of OSS CVEs in PAN-OS

Best Regards,

[JayGolf]

Hi @S.Chougule552919 ,

PAN-OS is not affected by CVE-2025-61984. Palo Alto Networks has an informational advisory for OSS CVEs in PAN-OS, and this CVE is listed there as not applicable because PAN-OS does not use the ProxyCommand option in the SSH client configuration.

You can reference the PANW Security Advisory here: PAN-SA-2025-0006 and search the page for additional CVEs and which products are affected.