CVE-2026-106552

Analyzed Analyzed - Analysis Complete

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-13

Assigner: MITRE

Description

In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recursive copy operation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-13

Generated

2026-10-19

AI Q&A

2026-10-07

EPSS Evaluated

2026-10-18

NVD

CVE-2026-106552

Affected Vendors & Products

Vendor	Product	Version / Range
openbsd	openssh	to 10.6 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-23	The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.

Attack-Flow Graph

Executive Summary

This vulnerability in OpenSSH's sftp before version 10.6 allows a malicious server to perform directory traversal during a recursive copy operation. This means files could be written to locations outside the intended directory, potentially overwriting or creating files in unauthorized areas.

Detection Guidance

To detect this vulnerability, check the OpenSSH version on your system. Run 'ssh -V' to display the version. If it is below 10.6, the system is vulnerable. Additionally, monitor for unexpected file writes in unintended directories during recursive SFTP operations.

Impact Analysis

If you use OpenSSH's sftp for file transfers, an attacker controlling the server could write files to unintended locations on your system. This might lead to unauthorized file modifications, data corruption, or execution of malicious files if they overwrite critical system or application files.

Compliance Impact

This vulnerability could lead to unauthorized file access or modification, which may violate data integrity and confidentiality requirements in GDPR and HIPAA. Organizations might face compliance violations if sensitive data is exposed or altered due to this issue.

Mitigation Strategies

Upgrade OpenSSH to version 10.6 or later to address the directory traversal issue in sftp during recursive copy operations.

Hi! I’m here to help you understand CVE-2026-106552. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70