CVE-2026-102643

The AsyncSSH Python package, which provides an asynchronous SSHv2 implementation, is vulnerable to a chroot bypass in versions prior to 2.24.1 . The root cause is located in SFTPServer.map_path(), where the application improperly handles paths starting with exactly two leading slashes. Because po...