CVE-2026-56452: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Apache Software Foundation Apache MINA SSHD
Path traversal in the sshd-scp component of Apache MINA SSHD. Apache MINA SSHD is a Java library for client-side and server-side SSH. The implementation of receiving files or directories via SCP did not validate filenames in SCP "C" or "D" commands. A malicious sender could send filenames containing paths, resulting in files to be written in attacker-controlled places. The issue affects only * applications that use no longer supported Apache MINA SSHD versions < 2.0.0 and use the SCP functions to receive files, * or applications using sshd-scp in Apache MINA SSHD >= 2.0.0 to receive files. Applications using Apache MINA SSHD >= 2.0.0 not using sshd-scp are not affected. The issue is fixed in Apache MINA 2.19.0 and 3.0.0-M5. Affected applications are advised to upgrade to these versions.
AI Analysis
Technical Summary
CVE-2026-56452 is a path traversal vulnerability (CWE-22) in the sshd-scp component of Apache MINA SSHD. The SCP implementation did not validate filenames in SCP "C" or "D" commands, allowing an attacker to specify file paths that cause files to be written to arbitrary locations. This affects applications using unsupported Apache MINA SSHD versions prior to 2.0.0 with SCP receive functionality, and those using sshd-scp in versions >= 2.0.0 but less than 2.19.0 or equal to 3.0.0-M1. The vulnerability is resolved in Apache MINA SSHD versions 2.19.0 and 3.0.0-M5.
Potential Impact
The vulnerability allows an attacker to write files to arbitrary locations on the file system of the server running the vulnerable Apache MINA SSHD component when receiving files via SCP. This can lead to unauthorized file creation or overwriting, potentially impacting system integrity. There is no direct confidentiality or availability impact stated. The CVSS v3.1 score is 7.5 (high), reflecting network attack vector, low complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact.
Mitigation Recommendations
A fix is available in Apache MINA SSHD versions 2.19.0 and 3.0.0-M5. Users of affected versions (=3.0.0-M1 and <=2.18.0) should upgrade to one of these fixed versions to remediate the vulnerability. Applications using Apache MINA SSHD >= 2.0.0 that do not use the sshd-scp component are not affected. Patch status is confirmed by the vendor advisory stating the fix in 2.19.0 and 3.0.0-M5.
CVE-2026-56452: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Apache Software Foundation Apache MINA SSHD
Description
Path traversal in the sshd-scp component of Apache MINA SSHD. Apache MINA SSHD is a Java library for client-side and server-side SSH. The implementation of receiving files or directories via SCP did not validate filenames in SCP "C" or "D" commands. A malicious sender could send filenames containing paths, resulting in files to be written in attacker-controlled places. The issue affects only * applications that use no longer supported Apache MINA SSHD versions < 2.0.0 and use the SCP functions to receive files, * or applications using sshd-scp in Apache MINA SSHD >= 2.0.0 to receive files. Applications using Apache MINA SSHD >= 2.0.0 not using sshd-scp are not affected. The issue is fixed in Apache MINA 2.19.0 and 3.0.0-M5. Affected applications are advised to upgrade to these versions.
CVSS v3.1
Score 7.5high
Affected software
pkg:maven/Apache Software Foundation/org.apache.sshd:sshd-scpRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-56452 is a path traversal vulnerability (CWE-22) in the sshd-scp component of Apache MINA SSHD. The SCP implementation did not validate filenames in SCP "C" or "D" commands, allowing an attacker to specify file paths that cause files to be written to arbitrary locations. This affects applications using unsupported Apache MINA SSHD versions prior to 2.0.0 with SCP receive functionality, and those using sshd-scp in versions >= 2.0.0 but less than 2.19.0 or equal to 3.0.0-M1. The vulnerability is resolved in Apache MINA SSHD versions 2.19.0 and 3.0.0-M5.
Potential Impact
The vulnerability allows an attacker to write files to arbitrary locations on the file system of the server running the vulnerable Apache MINA SSHD component when receiving files via SCP. This can lead to unauthorized file creation or overwriting, potentially impacting system integrity. There is no direct confidentiality or availability impact stated. The CVSS v3.1 score is 7.5 (high), reflecting network attack vector, low complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact.
Mitigation Recommendations
A fix is available in Apache MINA SSHD versions 2.19.0 and 3.0.0-M5. Users of affected versions (=3.0.0-M1 and <=2.18.0) should upgrade to one of these fixed versions to remediate the vulnerability. Applications using Apache MINA SSHD >= 2.0.0 that do not use the sshd-scp component are not affected. Patch status is confirmed by the vendor advisory stating the fix in 2.19.0 and 3.0.0-M5.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- apache
- Date Reserved
- 2026-06-22T13:31:17.496Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a5e8bb12a4a8d5989b8f5b0
Added to database: 07/20/2026, 20:57:21 UTC
Last enriched: 07/20/2026, 21:11:56 UTC
Last updated: 07/21/2026, 03:43:40 UTC
Views: 13
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.