CVE-2026-77473

The AsyncSSH Python package (prior to version 2.24.1 ) is vulnerable to a path traversal issue during recursive remote-to-local SFTP copies. The vulnerability exists in the SFTPClient._copy() function within asyncssh/sftp.py, which can be reached via get(), mget(), and copy(). Because the package...