CVE-2026-62325 | goshs-labs goshs up to 2.1.3 sftpserver sftpserver/sftpserver.go improper authentication

A vulnerability described as critical has been identified in goshs-labs goshs up to 2.1.3. Affected by this vulnerability is an unknown functionality of the file sftpserver/sftpserver.go of the component sftpserver. Such manipulation leads to improper authentication.

This vulnerability is uniquely identified as CVE-2026-62325. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.