A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory. This could be misused to create malicious executable or configuration files and make the user execute them under specific consequences. This is the same issue as in OpenSSH, tracked as CVE-2019-6111.
CVE-2026-0964
CVSS base score
6.3 (v3.1)
Severity
MEDIUM
Attack vector
Network
Weakness
CWE-22
Last modified
November 5, 2026
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Affected products
libssh libssh
redhat hardened images
redhat openshift container platform
redhat enterprise linux
References
- access.redhat.com
- access.redhat.com
- access.redhat.com Mitigation, Vendor Advisory
- bugzilla.redhat.com Issue Tracking, Vendor Advisory
- www.libssh.org Release Notes