This vulnerability in libssh affects Red Hat Enterprise Linux 10 during SFTP directory listings. The longname field is constructed by concatenating attacker-controlled filenames into a fixed-size stack buffer without proper bounds checking. If the filenames are sufficiently long, this can overflow the buffer, potentially causing a crash or enabling code execution on the server. The CVSS 3.1 base score is 6.7, indicating a medium severity with local attack vector, high attack complexity, low privileges required, and user interaction needed. No official patch or remediation level is stated in the vendor advisory, and no known exploits in the wild have been reported as of the advisory date.

Successful exploitation can lead to denial of service via server crashes or potentially arbitrary code execution on the affected server. The vulnerability requires local access with low privileges and user interaction, limiting remote exploitation. Confidentiality, integrity, and availability impacts are all rated high in the CVSS vector, indicating serious consequences if exploited.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-15370 for current remediation guidance. No official fix or workaround is currently documented in the advisory. Users should monitor the vendor advisory for updates and apply patches once available. Until then, limit exposure by restricting local access and carefully controlling SFTP usage with untrusted clients.