CVE-2026-56623

Name of the Vulnerable Software and Affected Versions Apache MINA SSHD versions 2.18.0 Apache MINA SSHD versions 3.0.0-M1 through 3.0.0-M4

Description Apache MINA SSHD is a Java library for client-side and server-side SSH. A path traversal issue exists in the sshd-git component when running on Windows. This flaw allows an authenticated remote user to access git repositories located outside of the configured server-side root directory due to ineffective path validation.

Recommendations Upgrade Apache MINA SSHD version 2.18.0 to 2.19.0. Upgrade Apache MINA SSHD versions 3.0.0-M1 through 3.0.0-M4 to 3.0.0-M5.