In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recursive copy operation.Referenceshttps://www.openssh.org/releasenotes.html#10.6