A security vulnerability has been identified in libssh2 versions up to 1.11.1. The vulnerability exists in the userauth_password function within the src/userauth.c file. Attackers can manipulate the username_len and password_len arguments to cause an integer overflow condition. This vulnerability can be exploited remotely, making it particularly concerning. A patch has been developed and is available with the commit hash 256d04b60d80bf1190e96b0ad1e91b2174d744b1. Organizations using affected versions of libssh2 should apply the patch immediately to remediate this security issue.