pruva-verify REPRO-2026-00186 curl -O https://pruva.dev/api/v1/reproductions/REPRO-2026-00186/artifacts/bundle/repro/reproduction_steps.sh && chmod +x reproduction_steps.sh && ./reproduction_steps.sh libssh2 through 1.11.1 is affected by CVE-2026-55200 / GHSA-R8MH-X5QV-7GG2, an SSH transport packet-length validation flaw. Pruva reproduced the issue through a real curl SFTP-over-SSH client path: a malicious localhost SSH peer completed authentication and SFTP subsystem setup, then sent an encrypted SSH packet whose decoded packet_length was 0xfffffff0. The vulnerable non-sanitized curl/libssh2 product build crashed with SIGSEGV twice; the same curl build linked against the fixed libssh2 commit failed closed without a native crash twice.
The agent's step-by-step process — every tool call, every handoff, the moment the exploit fired. Phases: support triages the advisory · repro reproduces it · vuln_variant confirms the fix blocks it · judge verifies.
Loading session...
Scripts, logs, diffs, and output captured during the reproduction.