CVE-2026-59997

Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 10.4

Description The internal-sftp component in sshd only recognizes the first 9 command-line arguments. This limitation may compromise security properties if critical configuration arguments are placed beyond the ninth position and are consequently ignored by the system.

Recommendations Update to OpenSSH version 10.4 or later.