K000163738: SFTP vulnerability CVE-2026-59995

Security Advisory Description sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server. CVE-2026-59995 Impact This vulnerability allows a remote attacker-controlled server to cause a partial deni...