{"vulnerability": "CVE-2026-54591", "sightings": [{"uuid": "5ce42261-1b05-4bce-9c3c-8df63e122722", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54591", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq67d6yebi27", "content": "CVE-2026-54591 - AsyncSSH: SCP Path Traversal to Arbitrary File Write\nCVE ID : CVE-2026-54591\n \n Published : July 8, 2026, 8:33 p.m. | 26\u00a0minutes ago\n \n Description : AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 prot...", "creation_timestamp": "2026-07-08T22:49:35.921187Z"}, {"uuid": "95274199-9242-450b-a94c-740991127fcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54591", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3mtyqeofowg25", "content": "asyncssh 2.23.1 fixes CVE-2026-54591: the SCP receive path does not sanitize server-provided filenames, so a malicious SSH server can chain \"../\" through the D directory action and write outside the target directory. Same class as OpenSSH's CVE-2019-6111. #dev", "creation_timestamp": "2026-08-26T16:19:28.033476Z"}, {"uuid": "575765d1-bdeb-4e43-8cc6-64b7cbcee5e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54591", "type": "published-proof-of-concept", "source": "https://github.com/ronf/asyncssh/security/advisories/GHSA-2wxc-x7rj-hg8f", "content": "", "creation_timestamp": "2026-08-26T16:35:03.563902Z"}, {"uuid": "d73e48ff-0d90-49be-a6fa-33777182f64b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54591", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mr2zklwmfk2t", "content": "\ud83d\udea8 ATEN\u00c7\u00c3O admins Fedora 44! O python-asyncssh tem duas vulnerabilidades cr\u00edticas (CVE-2026-54590 e CVE-2026-54591).  Saiba mais :- >  tinyurl.com/5ts4m4rt", "creation_timestamp": "2026-07-20T09:53:36.458683Z"}, {"uuid": "d16ca391-3300-477c-9830-3607c6d4bd86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54591", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mr2zkmrplk2t", "content": "\ud83d\udea8 ATEN\u00c7\u00c3O admins Fedora 44! O python-asyncssh tem duas vulnerabilidades cr\u00edticas (CVE-2026-54590 e CVE-2026-54591).  Saiba mais :- >  tinyurl.com/5ts4m4rt", "creation_timestamp": "2026-07-20T09:53:36.934617Z"}]}