CVE-2026-103028

The open-source file transfer solution SFTPGo (versions 2.5.0 through 2.7.6 ) is vulnerable to a source-side file-pattern filter bypass. An authenticated user with copy permissions can copy files restricted by denied_patterns or those outside allowed_patterns to an allowed destination because fil...