Multiple versions of the PuTTY SSH client were found to be vulnerable to a high-severity flaw which allowed, in certain scenarios, threat actors to exfiltrate private keys used to generate cryptographic signatures.
As a result, the attackers could gain unauthorized access to SSH servers, or could be allowed to sign commits as a developer.
