CVE-2026-106552

OpenBSD / OpenSSH PUBLISHED

Description (CNA)

In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recursive copy operation.

Affected (CNA)

Vendor / product	Versions
OpenBSD / OpenSSH	affected 0 before 10.6

CWE

CWE-23

References

https://www.openssh.org/releasenotes.html#10.6

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.