Libssh2 flaw CVE-2026-55200 allows remote code execution

THE content details a critical vulnerability in libssh2, tracked as CVE-2026-55200, with a CVSS score of 9.2. This flaw allows remote code execution through an out-of-bounds write due to unchecked packet length in the transport layer. All versions of libssh2 up to and including 1.11.1 are affected. Although there is no confirmed exploitation yet, updates have been released to patch the vulnerability. Users are urged to update immediately to the latest version or limit server trust if unable to patch.