cvesecurityvulnerability
CVE-2026-72903: Tabby Terminal Lets Malicious SFTP Servers Overwrite Files Through Path Traversal
Tabby versions before 1.0.235 allow a malicious SFTP server to write files outside the download directory via backslash path traversal in entry names on Windows.
