CVE-2026-106552·OpenSSH vulnerability

How likely is exploitation

FIRST's Exploit Prediction Scoring System puts the probability of this CVE being exploited in the next 30 days at 0.29% — higher than 20% of all published CVEs. EPSS is an independent forecast of exploitation, not a severity rating: it says nothing about how much damage a successful attack does, which is what a CVSS score measures.

Affected versions

How to fix this CVE

Update OpenSSH to version 10.6 or later to resolve a directory traversal vulnerability in the SFTP recursive copy functionality. This flaw could allow an attacker to write files outside the intended directory during file transfer operations. Apply the update immediately to all systems running OpenSSH versions prior to 10.6.

sudo dnf update openssh-server openssh-clients

How to check if you are affected

1. Check installed OpenSSH version: ssh -V or sshd -v
2. Verify SFTP service is enabled: systemctl status ssh (Ubuntu/Debian) or systemctl status sshd (RHEL/CentOS/Amazon Linux)
3. Search auth logs for suspicious SFTP recursive copy operations: grep -i 'sftp.*copy\|directory traversal' /var/log/auth.log /var/log/secure
4. Confirm update applied: Compare output of 'ssh -V' against OpenSSH 10.6 release notes at openssh.org/releasenotes.html#10.6

FAQ

Related OpenSSH CVEs

References

• https://www.openssh.org/releasenotes.html#10.6