CVE-2026-56452: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Apache Software Foundation Apache MINA SSHD
A path traversal vulnerability exists in the sshd-scp component of Apache MINA SSHD, allowing malicious senders to write files to arbitrary locations by sending crafted filenames containing paths. This affects applications using unsupported versions prior to 2.0.0 with SCP receive functionality, and applications using sshd-scp in versions 2.0.0 and later. The issue is fixed in Apache MINA SSHD versions 2.19.0 and 3.0.0-M5. Applications not using sshd-scp in versions 2.0.0 and later are not affected.
AI Analysis
Technical Summary
The vulnerability (CVE-2026-56452) is a path traversal flaw in the SCP file receiving implementation of Apache MINA SSHD's sshd-scp component. Filenames in SCP "C" or "D" commands were not properly validated, allowing attackers to specify paths that cause files to be written outside intended directories. This affects unsupported versions prior to 2.0.0 using SCP receive functions, and all versions using sshd-scp from 2.0.0 onward. The flaw is resolved in versions 2.19.0 and 3.0.0-M5 by properly validating and restricting file paths during SCP file reception.
Potential Impact
An attacker who can send files via SCP to a vulnerable server can cause files to be written to arbitrary locations on the filesystem, potentially overwriting critical files or placing malicious files in attacker-controlled locations. This can lead to integrity compromise of the system or application. The vulnerability does not impact confidentiality or availability directly but has a high impact on integrity.
Mitigation Recommendations
A fix is available in Apache MINA SSHD versions 2.19.0 and 3.0.0-M5. Users of affected versions should upgrade to one of these fixed versions to remediate the vulnerability. Applications using versions prior to 2.0.0 should upgrade to a supported version with the fix. Applications using versions 2.0.0 and later but not using sshd-scp are not affected and require no action.
CVE-2026-56452: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Apache Software Foundation Apache MINA SSHD
Description
A path traversal vulnerability exists in the sshd-scp component of Apache MINA SSHD, allowing malicious senders to write files to arbitrary locations by sending crafted filenames containing paths. This affects applications using unsupported versions prior to 2.0.0 with SCP receive functionality, and applications using sshd-scp in versions 2.0.0 and later. The issue is fixed in Apache MINA SSHD versions 2.19.0 and 3.0.0-M5. Applications not using sshd-scp in versions 2.0.0 and later are not affected.
CVSS v3.1
Score 7.5high
Affected software
pkg:maven/Apache Software Foundation/org.apache.sshd:sshd-scpRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability (CVE-2026-56452) is a path traversal flaw in the SCP file receiving implementation of Apache MINA SSHD's sshd-scp component. Filenames in SCP "C" or "D" commands were not properly validated, allowing attackers to specify paths that cause files to be written outside intended directories. This affects unsupported versions prior to 2.0.0 using SCP receive functions, and all versions using sshd-scp from 2.0.0 onward. The flaw is resolved in versions 2.19.0 and 3.0.0-M5 by properly validating and restricting file paths during SCP file reception.
Potential Impact
An attacker who can send files via SCP to a vulnerable server can cause files to be written to arbitrary locations on the filesystem, potentially overwriting critical files or placing malicious files in attacker-controlled locations. This can lead to integrity compromise of the system or application. The vulnerability does not impact confidentiality or availability directly but has a high impact on integrity.
Mitigation Recommendations
A fix is available in Apache MINA SSHD versions 2.19.0 and 3.0.0-M5. Users of affected versions should upgrade to one of these fixed versions to remediate the vulnerability. Applications using versions prior to 2.0.0 should upgrade to a supported version with the fix. Applications using versions 2.0.0 and later but not using sshd-scp are not affected and require no action.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- apache
- Date Reserved
- 2026-06-22T13:31:17.496Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a5e8bb12a4a8d5989b8f5b0
Added to database: 07/20/2026, 20:57:21 UTC
Last enriched: 07/30/2026, 12:08:16 UTC
Last updated: 09/03/2026, 10:52:10 UTC
Views: 89
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.