Skip to content
OpenAdvisories

Package · Alpine

sshfs

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-47187

    SSHFS Symlink Escape: Rogue SFTP Server → Local File Read/Write

    SSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP server can return absolute symlink targets or relative targets containing parent-directory components that SSHFS passes through FUSE for resolution by the…

    libfuse sshfs sshfs-fuse sshfs Debian Ubuntu Alpine