libssh2 vulnerabilities and CVEs

Known vulnerabilities affecting libssh2, with exploit availability attached to each one, so you can tell a flaw someone has written code for from one nobody has.

4 vulnerabilities tracked.

8.7 libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftpopen() function in src/sftp.c that allows… CVE-2026-66032 24 Jul 2026
8.3 libssh2 through 1.11.1 grows its publickey list with SSH2REALLOC but does not zero-initialize new entries before parsing populates them, so… CVE-2026-58051 28 Jun 2026
8.3 libssh2 through 1.11.1, fixed in commit 2dae302, contains an out-of-bounds heap read vulnerability in the sftpsymlink() function in… CVE-2025-15661 18 Jun 2026
7.7 libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability that allows a malicious SSH server to… CVE-2026-66034 24 Jul 2026

What this covers

This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that libssh2 is free of vulnerabilities.

Query this from an agent over MCP · Check a lockfile by version

Other products tracked here