This vulnerability involves improper limitation of pathnames in the SCP client of Red Hat Enterprise Linux 10. When connecting to a malicious SCP server, the client may accept unexpected pathnames that allow overwriting of local files outside the working directory. This can lead to the creation of malicious executables or configuration files, potentially resulting in execution under certain conditions. The vulnerability is analogous to CVE-2019-6111 in OpenSSH. The CVSS 3.0 vector indicates network attack vector, high attack complexity, no privileges required, user interaction required, unchanged scope, and low impact on confidentiality, integrity, and availability.

The vulnerability allows a remote attacker controlling an SCP server to cause the SCP client to overwrite arbitrary files on the client system outside the intended directory. This could lead to the creation of malicious executables or configuration files, which might be executed by the user, potentially compromising the client system. The impact is rated medium with limited confidentiality, integrity, and availability impact as per the CVSS score.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-0964 for current remediation guidance. Until an official fix is available, users should exercise caution when using SCP with untrusted servers. No vendor advisory content explicitly states that no action is required or that the issue is already mitigated.