TI-2026-30142 CVE-2026-41589 · GHSA-xjvp-7243-rg9h
Wish has SCP Path Traversal that allows arbitrary file read/write
Priority HIGH 76
Wish is an SSH server with defaults and a collection of middlewares.
charmbracelet
Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9
Exploited now
charmbracelet records in CISA KEVNo charmbracelet vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
1 record in Wish · all components