CVE-2026-58624

A flaw was found in the sshd-git component of Apache MINA SSHD, specifically within its GitPgmCommandFactory. An authenticated SSH user could exploit improper input validation to execute arbitrary JGit commands. This allows an attacker to write files to arbitrary locations on the server,...

CVE-2026-58624

Improper input validation in sshd-git in Apache MINA SSHD. Apache MINA SSHD is a Java library for client-side and server-side SSH. Component org.apache.sshd:sshd-git provides though its GitPgmCommandFactory a way to configure an Apache MINA SSHD server such that SSH clients can remotely execute g...