CVE-2026-77375
SFTPGo: Denial of service via malformed SSH channel request
Published Oct 15, 2026
A flaw in the SSH service allows an authenticated client to crash the server by sending a malformed protocol message while opening a channel.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 15, 2026 · GitLab Advisory Database
Detected
A flaw in the SSH service allows an authenticated client to crash the server by sending a malformed protocol message while opening a channel.
Affected
- golang github.comversion unspecified
Sources
- GitLab Advisory DatabasePackage advisoryCVE-2026-77375
A flaw in the SSH service allows an authenticated client to crash the server by sending a malformed protocol message while opening a channel.
advisories.gitlab.com