PT-2026-56286 · Openssh · Openssh

Published 2026-07-08 · Updated 2026-07-08 · CVE-2026-59995

Positive Technologies (AI Summary)

CVSS v3.1

4.2

Medium

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 10.4

Description The sftp client does not properly constrain the location of downloaded files when the command sftp server:/path . is used to connect to an attacker-controlled server.

Recommendations Update to version 10.4 or later.

Fix

Relative Path Traversal

Weakness Enumeration

CWE-23

Related Identifiers

CVE-2026-59995

Affected Products

Openssh

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-59995 · Security Note
• https://twitter.com/infoflowcloud/status/2074730576448197103 · Twitter Post
• https://openwall.com/lists/oss-security/2026/07/06/5 · Note
• https://twitter.com/CVEnew/status/2074728412330037356 · Twitter Post
• https://openssh.org/releasenotes.html#10.4p1 · Note
• https://marc.info/?l=openssh-unix-dev&m=178333966933090&w=2 · Note