Erlang OTP ssh_sftpd REALPATH Path Existence Oracle Vulnerability (CVE-2026-5342)

github.com 2026-07-03查看中文 →

Security AdvisoryGHSA-hf9w-h5w4-h976LowErlang/OTP

Affected:

OTP >= 17.0
ssh >= 3.0.1

Fixed in:

OTP 29.0.3
OTP 28.5.0.3
OTP 27.3.4.14
ssh 6.0.2
ssh 5.5.2.2

Referenced CVEs: CVE-2026-53422

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

LangGraph Memory Key Confusion Vulnerability in AI-fundamentals 2026-07-04 Session Isolation Vulnerability in Smart Customer Service Causing Unauthorized Access 2026-07-04 RT-Thread RT-Smart Serial Driver ioctl Unvalidated User Pointer Vulnerability 2026-07-04 RT-Smart serial_ioctl Unchecked User Pointer Vulnerability and Fix Analysis 2026-07-04 fickling MLAllowList Bypass via State Pollution 2026-07-04

Offline Archive

Offline screenshot & PDF are Pro-exclusive