PT-2026-37134 · Wish · Wish

Evnsh · Published 2026-04-18 · Updated 2026-05-13 · CVE-2026-41589

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Wish versions 2.0.0 through 2.0.0

Description The SCP middleware in charm.land/wish/v2 is subject to path traversal. A malicious SCP client can read and write arbitrary files, as well as create directories outside the configured root directory, by sending crafted filenames containing ../ sequences over the SCP protocol. This occurs because the prefixed() function fails to properly validate that the resolved path remains within the root directory after cleaning the path. This can be exploited through three main vectors: arbitrary file writes during file reception (scp -t), arbitrary file reads during file transmission (scp -f), and file enumeration using glob metacharacters (*, ?, [). If the server uses default authentication that accepts all connections, these actions can be performed by unauthenticated remote attackers.

Recommendations Update to version 2.0.1. As a temporary workaround, restrict access to the scp.Middleware or the scp.NewFileSystemHandler component to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-41589

GHSA-XJVP-7243-RG9H

Affected Products

Wish

References · 7

• 🔥 https://github.com/charmbracelet/wish/security/advisories/GHSA-xjvp-7243-rg9h · Exploit
• https://osv.dev/vulnerability/GHSA-xjvp-7243-rg9h · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-41589 · Security Note
• https://github.com/charmbracelet/wish/releases/tag/v2.0.1 · Note
• https://github.com/charmbracelet/wish · Note
• https://twitter.com/lyrie_ai/status/2054358419604136097 · Twitter Post
• https://twitter.com/lyrie_ai/status/2054358418777923786 · Twitter Post