The flaw in OpenSSH SFTP enables a server‑side directory traversal during recursive copy operations, allowing files to be written to locations outside the intended directory. This can result in overwriting existing files or creating new ones in arbitrary directories, potentially compromising system integrity or confidentiality.

OpenSSH versions prior to 10.6 running on OpenBSD are vulnerable.

The CVSS score of 4.2 indicates moderate severity, and the EPSS score of 0.00358 (< 1%) indicates a low probability of exploitation. The vulnerability is not listed in CISA KEV. An attacker must be able to initiate an SFTP recursive copy to exploit this path traversal, which is a local or authenticated‑network attack vector inferred from the description. Successful exploitation writes files to unintended paths, which could compromise file integrity and availability.