SSH.NET vulnerabilities

2 known vulnerabilities in SSH.NET from Sshnet. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  SSH.NET: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-85756Sep 16, 2026Sshnet

  SSH.NET is a Secure Shell (SSH) library for .NET. Prior to 2026.0.0, ScpClient places caller-supplied remote paths into the command used to run scp on the server, and the default RemotePathTransformation.DoubleQuote transformation cannot safely quote every rem

• 7.1 High severity

  SSH.NET: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-48798Aug 18, 2026Sshnet

  SSH.NET is a Secure Shell (SSH) library for .NET. In 2025.1.0 and earlier, ScpClient.Download(string directoryName, DirectoryInfo directoryInfo) trusts file and directory names returned by a remote SCP server and combines them with the requested local director