Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. The flaw permits the attacker to construct a malicious path that bypasses normal path checks, leading to arbitrary code execution on the target machine.

Affected systems include Microsoft Windows 10 versions 1809, 21H2, and 22H2; Microsoft Windows 11 versions 23H2, 24H2, 25H2, 26H2, and 26H1; and Microsoft Windows Server editions 2019, 2022, and 2025. All listed versions are impacted regardless of architecture or installation type.

The CVSS score of 8.8 indicates high severity, and while the EPSS score is not available, the vulnerability is not currently listed in the CISA KEV catalog. The likely attack vector is remote over the network, targeting the OpenSSH service. An attacker may send a specially crafted SSH request that exploits the relative path traversal to execute arbitrary code with the privileges of the OpenSSH process.