Skip to content
OpenAdvisories

Product · libfuse

sshfs

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.0
    CVE-2026-48711

    SSHFS: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

    SSHFS is a network filesystem client for connecting to SSH servers. From version 1.4 until 3.7.6, SSHFS accepts a bracketed mount source such as [-oProxyCommand=CMD]:/path and find_base_path() removes the brackets, leaving a host value that begins with - and …

    libfuse sshfs sshfs-fuse sshfs Debian Ubuntu Alpine