CVE-2026-106552 OpenBSD CVE debrief

Who should care

System administrators and security teams responsible for OpenSSH installations, especially those using versions prior to 10.6, should assess exposure and consider upgrading to mitigate this vulnerability.

Why it matters

CVE-2026-106552 is a medium-severity vulnerability in OpenSSH that allows a server to write files to unintended locations during a recursive copy operation in sftp. System administrators and security teams should assess exposure, especially for versions prior to 10.6, and consider upgrading to mitigate this vulnerability. The impact is limited by the need for a specific configuration and action to exploit the vulnerability.

• Potential unauthorized file writes
• Need for version upgrade or patching
• Monitoring for suspicious sftp activity

Technical summary

A directory traversal vulnerability exists in OpenSSH before version 10.6. During a recursive copy operation in sftp, a server can trigger directory traversal, potentially causing files to be written to unintended locations. This vulnerability is particularly concerning for OpenSSH users, especially those using versions prior to 10.6, as it could allow for unauthorized file writes. Users should review and restrict sftp access to sensitive areas and monitor OpenSSH logs for suspicious activity. The vulnerability has a CVSS score of 4.2 and a medium severity, and it

Defensive priority

Medium priority for OpenSSH users, especially those using versions prior to 10.6.

Recommended defensive actions

• Upgrade OpenSSH to version 10.6 or later
• Review and restrict sftp access to sensitive areas
• Monitor OpenSSH logs for suspicious activity

Evidence notes

The CVE record and OpenSSH release notes provide information about the vulnerability. However, details about potential exploitation or affected systems are limited.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.