{"id":"CVE-2026-77375","aliases":["EUVD-2026-98780","GHSA-q7pc-356p-hggc","GO-2026-6792"],"status":"published","title":"SFTPGo: Denial of service via malformed SSH channel request","description":"SFTPGo is an open source, event-driven file transfer solution. Prior to 2.7.5, an authenticated SSH user can send a malformed protocol message while opening a channel, causing an unhandled error that terminates the server process and affects all connected users until restart. No confidentiality or integrity impact has been identified. This issue is fixed in 2.7.5.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00309,"percentile":0.23864,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-129"],"published":"2026-10-13T14:52:46Z","modified":"2026-10-28T02:30:46Z","fixes":[{"ecosystem":"Go","package":"github.com/drakkan/sftpgo/v2","fixed_in":["2.7.5"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Go","package":"github.com/drakkan/sftpgo/v2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.7.4"},{"fixed":"2.7.5"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/drakkan/sftpgo/v2","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.7.5"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/drakkan/sftpgo","ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/drakkan/sftpgo/v2","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.7.5"}]}]}],"products":[{"vendor":"drakkan","product":"sftpgo"}],"references":[{"url":"https://github.com/drakkan/sftpgo/security/advisories/GHSA-q7pc-356p-hggc","tags":["x_refsource_CONFIRM","advisory","web"]},{"url":"https://github.com/drakkan/sftpgo/commit/4f751232d7025cf2f7360e01ee8dca81e74b48b0","tags":["x_refsource_MISC","fix","web"]},{"url":"https://github.com/drakkan/sftpgo/releases/tag/v2.7.5","tags":["x_refsource_MISC","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77375","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-q7pc-356p-hggc"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/77xxx/CVE-2026-77375.json","tags":["advisory"]},{"url":"https://github.com/drakkan/sftpgo","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2026-77375","title":"SFTPGo: Denial of service via malformed SSH channel request","description":"SFTPGo is an open source, event-driven file transfer solution. Prior to 2.7.5, an authenticated SSH user can send a malformed protocol message while opening a channel, causing an unhandled error that terminates the server process and affects all connected users until restart. No confidentiality or integrity impact has been identified. This issue is fixed in 2.7.5.","status":"published","published":"2026-10-13T14:52:46.056Z","modified":"2026-10-13T15:24:59.888Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-129"],"updated_at":"2026-11-02T14:20:15.712761Z"}],"euvd":[{"id":"EUVD-2026-98780","description":"SFTPGo is an open source, event-driven file transfer solution. Prior to 2.7.5, an authenticated SSH user can send a malformed protocol message while opening a channel, causing an unhandled error that terminates the server process and affects all connected users until restart. No confidentiality or integrity impact has been identified. This issue is fixed in 2.7.5.","status":"published","published":"2026-10-13T14:52:46Z","modified":"2026-10-13T15:24:59Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T17:27:20.397021Z"}],"ghsa":[{"id":"GHSA-q7pc-356p-hggc","title":"SFTPGo: Denial of service via malformed SSH channel request","description":"### Summary\n\nA flaw in the SSH service allows an authenticated client to crash the server by sending a malformed protocol message while opening a channel.\n\n### Impact\n\nAny user able to authenticate over SSH can trigger an unhandled error condition that aborts the server process. This results in a denial of service affecting all connected users until the service is restarted. No confidentiality or integrity impact has been identified; the issue is limited to availability.","status":"published","published":"2026-10-15T20:14:20Z","modified":"2026-10-15T20:14:21Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-129"],"updated_at":"2026-11-02T14:41:32.483482Z"}],"nvd":[{"id":"CVE-2026-77375","description":"SFTPGo is an open source, event-driven file transfer solution. Prior to 2.7.5, an authenticated SSH user can send a malformed protocol message while opening a channel, causing an unhandled error that terminates the server process and affects all connected users until restart. No confidentiality or integrity impact has been identified. This issue is fixed in 2.7.5.","status":"published","published":"2026-10-13T15:17:49.89Z","modified":"2026-10-13T16:17:22.717Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-129"],"updated_at":"2026-11-02T14:12:57.132005Z"}],"osv":[{"id":"CVE-2026-77375","title":"SFTPGo: Denial of service via malformed SSH channel request","description":"SFTPGo is an open source, event-driven file transfer solution. Prior to 2.7.5, an authenticated SSH user can send a malformed protocol message while opening a channel, causing an unhandled error that terminates the server process and affects all connected users until restart. No confidentiality or integrity impact has been identified. This issue is fixed in 2.7.5.","status":"published","published":"2026-10-13T14:52:46.056Z","modified":"2026-10-28T02:30:46.781741307Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-129"],"updated_at":"2026-11-02T15:45:17.102988Z"},{"id":"GHSA-q7pc-356p-hggc","title":"SFTPGo: Denial of service via malformed SSH channel request","description":"### Summary\n\nA flaw in the SSH service allows an authenticated client to crash the server by sending a malformed protocol message while opening a channel.\n\n### Impact\n\nAny user able to authenticate over SSH can trigger an unhandled error condition that aborts the server process. This results in a denial of service affecting all connected users until the service is restarted. No confidentiality or integrity impact has been identified; the issue is limited to availability.","status":"published","published":"2026-10-15T20:14:20Z","modified":"2026-10-19T21:40:57.524374779Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-129"],"updated_at":"2026-11-02T15:46:54.055966Z"},{"id":"GO-2026-6792","title":"SFTPGo: Denial of service via malformed SSH channel request in github.com/drakkan/sftpgo","description":"SFTPGo: Denial of service via malformed SSH channel request in github.com/drakkan/sftpgo","status":"published","published":"2026-10-19T21:08:35Z","modified":"2026-10-19T21:31:37.903463749Z","updated_at":"2026-11-02T15:47:03.11707Z"}]}}