OpenSSH scp unexpected setuid or setgid permissions (CVE-2026-35385)

Summary

Legacy scp downloads performed as root may retain dangerous permission bits.

Vulnerability ID	Vulnerability Overview
CVE-2026-35385	When scp runs as root using -O without -p, a downloaded file may be installed with setuid or setgid permissions contrary to expected behavior. The issue depends on these specific transfer options and privileges.

Affected Supported TeraStations

TS5020 / TS3030
- Fixed in firmware version 3.16
 

 

Back to Security Notices

Date	Description
10/14/2026	Initial release

Back to Security Notices