VYPR

sshfs

by Fuse

CVEs (2)

  • CVE-2026-47187CriAug 19, 2026
    risk 0.53cvss 9.3epss 0.00

    SSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP server can return absolute symlink targets or relative targets containing parent-directory components that SSHFS passes through FUSE for resolution by the client kernel…

  • CVE-2026-48711HigAug 19, 2026
    risk 0.39cvss 7.0epss 0.00

    SSHFS is a network filesystem client for connecting to SSH servers. From version 1.4 until 3.7.6, SSHFS accepts a bracketed mount source such as [-oProxyCommand=CMD]:/path and find_base_path() removes the brackets, leaving a host value that begins with - and is passed directly…