Is CVE-2026-106552 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-106552?

CVE-2026-106552 has a CVSS v3 severity of MEDIUM (4.2).

Back

CVE-2026-106552

Description

In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recursive copy operation.