File Transfer Solution Vulnerability in SFTPGo Affects Open Source Users

CVE-2026-77375

What is CVE-2026-77375?

SFTPGo, an open-source, event-driven file transfer solution, is susceptible to a vulnerability that allows authenticated SSH users to exploit the server. By sending a malformed protocol message while establishing a channel, an unauthenticated error can arise, leading to a crash of the server process. This impacts all connected users, necessitating a server restart. This issue has been addressed in version 2.7.5, which mitigates the risk of such interruptions.

References