CVE-2026-109152 | jbardin scp.py up to 0.16.1 SCP Receive _recv_file/_recv_pushd path traversal (Issue 206)

October 12, 2026 Yanac

A vulnerability was found in jbardin scp.py up to 0.16.1. It has been rated as problematic. The impacted element is the function _recv_file/_recv_pushd of the component SCP Receive Handler. The manipulation leads to path traversal.

This vulnerability is referenced as CVE-2026-109152. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is advised.

The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.VulDB Recent EntriesRead More