Skip to content
OpenAdvisories

Package · Alpine

sshfs

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.0
    CVE-2026-48711

    SSHFS: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

    SSHFS is a network filesystem client for connecting to SSH servers. From version 1.4 until 3.7.6, SSHFS accepts a bracketed mount source such as [-oProxyCommand=CMD]:/path and find_base_path() removes the brackets, leaving a host value that begins with - and …

    libfuse sshfs sshfs sshfs-fuse Debian Ubuntu Alpine
  • Critical 9.3
    CVE-2026-47187

    SSHFS Symlink Escape: Rogue SFTP Server → Local File Read/Write

    SSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP server can return absolute symlink targets or relative targets containing parent-directory components that SSHFS passes through FUSE for resolution by the…

    libfuse sshfs sshfs-fuse sshfs Debian Ubuntu Alpine