CVE-2026-48798

7.1 Élevée

Publiée le 18/08/2026 à 17:16 · Modifiée le 23/10/2026 à 00:10 · En attente d'analyse NVD · Source : security-advisories@github.com

Description

SSH.NET is a Secure Shell (SSH) library for .NET. In 2025.1.0 and earlier, ScpClient.Download(string directoryName, DirectoryInfo directoryInfo) trusts file and directory names returned by a remote SCP server and combines them with the requested local directory without containment validation, allowing a malicious, compromised, or man-in-the-middle server to use ../ sequences or absolute paths to create or overwrite files anywhere writable by the client process. This issue is fixed in version 2026.0.0.

Traduire en français

Produits concernés

sshnet SSH.NET

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.1 Élevée	security-advisories@github.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L`

Faiblesses (CWE)

CWE-22
CWE-73

Références

https://github.com/sshnet/SSH.NET/commit/600be0de543765995a189b5d7cd4efac5007f3ce
https://github.com/sshnet/SSH.NET/releases/tag/2026.0.0
https://github.com/sshnet/SSH.NET/security/advisories/GHSA-q939-rpr3-3284

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories