High severityOSV Advisory· Published Sep 11, 2025· Updated Apr 15, 2026
CVE-2025-48041
CVE-2025-48041
Description
Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Flooding. This vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl.
This issue affects OTP form OTP 17.0 until OTP 28.0.3, OTP 27.3.4.3 and 26.2.5.15 corresponding to ssh from 3.0.1 until 5.3.3, 5.2.11.3 and 5.1.4.12.
Affected products
1Patches
35f9af63eec46d49efa2d4fa999aaec93d2ecVulnerability mechanics
Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.
References
7- cna.erlef.org/cves/CVE-2025-48041.htmlnvd
- github.com/erlang/otp/commit/5f9af63eec4657a37663828d206517828cb9f288nvd
- github.com/erlang/otp/commit/d49efa2d4fa9e6f7ee658719cd76ffe7a33c2401nvd
- github.com/erlang/otp/pull/10157nvd
- github.com/erlang/otp/security/advisories/GHSA-79c4-cvv7-4qm3nvd
- osv.dev/vulnerability/EEF-CVE-2025-48041nvd
- www.erlang.org/doc/system/versions.htmlnvd
News mentions
0No linked articles in our index yet.