Directory Traversal Vulnerability in SSH.NET by SSH.NET

CVE-2026-48798

What is CVE-2026-48798?

SSH.NET, a library for Secure Shell (SSH) connectivity in .NET applications, contains a vulnerability affecting versions 2025.1.0 and earlier. The issue arises in the ScpClient.Download method, which improperly trusts file and directory names returned by a remote SCP server. This oversight allows an attacker on a compromised or malicious SCP server to exploit directory traversal techniques, such as using ../ sequences, to manipulate file paths. Consequently, attackers could create or overwrite files in unintended locations on the client system. The vulnerability has been addressed in version 2026.0.0. Users are strongly encouraged to update to this version to prevent potential exploitation.

References