Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-47187— SSHFS Symlink Escape: Rogue SFTP Server → Local File Read/Write

Quick assessment

Affected
libfuse sshfs
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

SSHFS 是一个网络文件系统客户端，用于连接到 SSH 服务器。在 3.7.6 版本之前，恶意的 SFTP 服务器可以返回包含绝对符号链接目标，或包含父目录组件（如“..”）的相对符号链接目标。SSHFS 会将其通过 FUSE 传递给客户端内核，以便内核将其解析到本地文件系统中。 虽然文档中提到了 缓解措施，但该措施未能正确处理相对符号链接。具体而言， 函数在 的第 2181 行就会提前返回，而 函数（位于 的第 2234 至 2236 行）则会直接将服务器提供的符号链接目标内容复制给内核。 如果受害者用户或受害

CVSS 9.3 · Critical EPSS 0.41% · P34

Affected Version Matrix 1

VendorProduct Version RangeStatus
libfuse sshfs < 3.7.6 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-47187

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
SSHFS Symlink Escape: Rogue SFTP Server → Local File Read/Write
Source: CVE Program / CVE List V5
Vulnerability Description
SSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP server can return absolute symlink targets or relative targets containing parent-directory components that SSHFS passes through FUSE for resolution by the client kernel against the local filesystem. The documented transform_symlinks mitigation does not contain relative targets because transform_symlink() returns early at sshfs.c:2181, while sshfs_readlink() at sshfs.c:2234 to sshfs.c:2236 otherwise copies the server-supplied link target to the kernel. A victim or victim-side tool that follows such a link through ordinary operations such as cp, rsync, backup tooling, or an editor can disclose readable local files back to the server or write server-controlled content to writable local files, potentially including startup or scheduled-task files. This issue is fixed in version 3.7.6.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
在文件访问前对链接解析不恰当(链接跟随)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
libfuse sshfs < 3.7.6 -

II. Public POCs for CVE-2026-47187

# POC Description Source Link Shenlong Link
AI-Generated POC Premium
Qwen3.6-35B-A3B · 11887 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month

III. Intelligence Information for CVE-2026-47187

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-47187 (2)

Vendor Advisories for CVE-2026-47187 (1)

Vendor Pages for CVE-2026-47187 (1)

IV. Related Vulnerabilities

Same product: sshfs
Same vendor: libfuse
Same weakness: CWE-59

V. Comments for CVE-2026-47187

No comments yet

Leave a comment