Reachable code path is loaded and executed in production. The workload accepts inbound SSH from a public load balancer and the package version is vulnerable. EPSS trending up over the last 7 days.

Successful exploitation can allow an unauthenticated attacker to bypass SSH authorization and execute commands as a privileged service identity.