What is GHSA-2prh-86cw-fm96?

GHSA-2prh-86cw-fm96 is a security advisory published by GitHub Security Advisories with Medium severity. sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when ...

Which CVE IDs does GHSA-2prh-86cw-fm96 cover?

GHSA-2prh-86cw-fm96 covers the following CVE IDs: CVE-2026-59995. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-2prh-86cw-fm96?

GHSA-2prh-86cw-fm96 has a CVSS v3 base score of 4.2, published by GitHub Security Advisories.

GHSA-2prh-86cw-fm96MediumCVSS 4.2

sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when ...

Vendor

GitHub Security Advisories

Published

July 8, 2026

Last Modified

July 8, 2026

🔗 CVE IDs covered (1)

CVE-2026-59995 →

📋 Description

sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-59995
https://marc.info/?l=openssh-unix-dev&m=178333966933090&w=2
https://www.openssh.org/releasenotes.html#10.4p1
https://www.openwall.com/lists/oss-security/2026/07/06/5
https://github.com/advisories/GHSA-2prh-86cw-fm96