Skip to content

Release history

sftpgo releases

Full-featured and highly configurable SFTP, HTTP/S, FTP/S and WebDAV server - S3, Google Cloud Storage, Azure Blob

Back to tool Latest release

All releases

2 shown

Upgrade now
v2.7.3 Breaking risk
Auth RCE / SSRF

CVE fixes + entropy check + log improvements

Open
v2.7.1 Security relevant patches GHSA-x8qh-7475-c5mp patches GO-2026-4697 patches GO-2026-4699
Breaking changes
  • Unified path handling: backslash now treated as path separator on all platforms
Security fixes
  • CVE-2026-30914: Path traversal and permission bypass
  • CVE-2026-30915: Placeholder sanitization in group paths
Notable features
  • OpenPubkey SSH support
View release on GitHub

Beta — feedback welcome: [email protected]