CVE-2026-0964CWE-22path-traversal

CVE-2026-0964

Medium · published March 27, 2026

CVSS v3.1
6.3
EPSS
0%
Percentile
34.0
In the wild
Unconfirmed
What it is

A malicious SCP server can send unexpected paths that could make the

client application override local files outside of working directory.

This could be misused to create malicious executable or configuration

files and make the user execute them under specific consequences.

This is the same issue as in OpenSSH, tracked as CVE-2019-6111.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00408 · 34.0th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-03-27T01:17Z
Affected products (6)
ProductVersionsFixed in
libssh/libssh< 0.11.40.11.4
redhat/hardened_imagesall versions—
redhat/openshift_container_platformall versions—
redhat/enterprise_linuxall versions—
redhat/enterprise_linuxall versions—
redhat/enterprise_linuxall versions—
References (5)
https://access.redhat.com/errata/RHSA-2026:18160 · [email protected]https://access.redhat.com/errata/RHSA-2026:18683 · [email protected]https://access.redhat.com/security/cve/CVE-2026-0964 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2436979 · [email protected]https://www.libssh.org/2026/02/10/libssh-0-12-0-and-0-11-4-security-releases/ · [email protected]
EPSS history
Timeline
  • 26 MAR 20:06Z
    Libssh: improper sanitation of paths received from scp servers
    cvelistv5