CVE-2026-48798

SSH.NET (a .NET SSH library) is vulnerable to arbitrary file write via its ScpClient.Download(string, DirectoryInfo) method. The method trusts file and directory names returned by a remote SCP server during recursive downloads without containment validation. A malicious, compromised, or man-in-th...