OpenSSH and Alpine Linux maintainers have issued an urgent workaround for a vulnerability exposing key-only accounts when SSH password authentication remains enabled.