CVE-2026-66032 | libssh2 up to 1.11.1 Sftp src/sftp.c sftp_open double free

July 24, 2026 Yanac

A vulnerability classified as problematic was found in libssh2 up to 1.11.1. This affects the function sftp_open of the file src/sftp.c of the component Sftp. Executing a manipulation can lead to double free.

The identification of this vulnerability is CVE-2026-66032. The attack may be launched remotely. There is no exploit available.

Applying a patch is advised to resolve this issue.VulDB Recent EntriesRead More