Verification of commit 42fc3aaa71411daed60544e3b40179c1038bed5d (fixing CVE-2026-109152 in v0.16.2) identified that while file receive operations now check os.path.commonpath against the active receive directory, directory push commands update the active receive directory without enforcing canonical containment.
When a stateful file transfer client validates file writes against a mutable current working directory, every protocol command that mutates the current working directory must enforce the same canonical containment boundary before updating the directory state.
In accordance with the maintainer's disclosure instructions in issue #206, exact line numbers and the remediation diff are withheld while coordinated disclosure is in progress.
Apply the upstream scp.py update once released, and avoid fetching files via SCP from untrusted remote peers.