Skip to content
OpenAdvisories

Vendor

libfuse

4 known vulnerabilities.

Products

sshfs 2 libfuse 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.0
    CVE-2026-48711

    SSHFS: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

    SSHFS is a network filesystem client for connecting to SSH servers. From version 1.4 until 3.7.6, SSHFS accepts a bracketed mount source such as [-oProxyCommand=CMD]:/path and find_base_path() removes the brackets, leaving a host value that begins with - and …

    libfuse sshfs sshfs-fuse sshfs Debian Ubuntu Alpine
  • High 7.8
    CVE-2026-33150 Public exploit

    Use After Free in libfuse

    libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a use-after-free vulnerability in the io_uring subsystem of libfuse allows a local attacker to crash FUSE filesystem processes and potentially execute arb…

    libfuse libfuse fuse3 Debian