# Customer Security Advisory: OpenSSH Password Authentication Bypass Vulnerability \[CVE-2026-123158\]

- Provider: [Akamai Cloud (Linode)](https://down.guide/providers/linode)
- Confidence: Confirmed
- Impact: Operational
- lasted 0m
- started 2026-11-05 17:40 UTC
- Linode.com
- id: DWN-dd3637a877
- Official page: https://stspg.io/j20lj2qgtmyl

## Updates from Akamai Cloud (Linode)
### 2026-11-05 17:40 UTC: resolved
Akamai is aware of the password authentication bypass vulnerability affecting certain Linux systems using musl libc that was recently mitigated by an urgent OpenSSH update . Since Alpine Linux is specifically called out as being affected, we wanted to assure customers that Linode’s Alpine images are not affected by this vulnerability. Linodes using password-less provisioning do not have password authentication enabled by default unless customers change this configuration option in sshd\_config after launch, while linodes launched using a password do not have any unlocked user accounts with a password hash set to ‘\*’.
However, we would like to use this opportunity as a reminder for customers to consider disabling password authentication permanently in favor of more secure mechanisms such as SSH keys or SSH CA certificates.

From the builder: does your app depend on Akamai Cloud (Linode)? [Sazabi](https://www.sazabi.com/?utm_source=down-guide&utm_medium=markdown&utm_content=linode) detects problems in your own logs without hand-written monitors, and you can ask it in plain language which errors mention Akamai Cloud (Linode).

---
down.guide reads providers' official status pages every minute and adds its own evidence, always labeled. Free, no account. Agents: MCP at https://down.guide/mcp, REST at https://down.guide/api/v1, feeds at https://down.guide/feed. Built by [Sazabi](https://www.sazabi.com/?utm_source=down-guide&utm_medium=markdown&utm_content=DWN-dd3637a877), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.