Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erlang OTP (ssh_sftpd module) allows Path Traversal. This vulnerability is associated with program fil…
Summary
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erlang OTP (ssh_sftpd module) allows Path Traversal. This vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl and program routines ssh_sftpd:is_within_root/2. The SFTP server uses string prefix matching via lists:prefix/2 rather than proper path component validation when checking if a path is within the configured root directory. This allows authenticated users to access siblin…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Lint boundary warnings (1)
The following non-blocking warnings were raised during the lint phase of this triage (e.g. reference URLs not yet on the allowlist). They do not affect entry usability and are disclosed for transparency (see DR-002).
-
REF_URL_NOT_ALLOWLISTEDurl not in allowlist: https://www.erlang.org/doc/system/versions.html#order-of-versions
Sources
- NVD DATABASE
Original Links
- https://cna.erlef.org/cves/CVE-2026-23942.html Vendor Advisory
- https://github.com/erlang/otp/commit/27688a824f753d4c16371dc70e88753fb410590b Patch
- https://github.com/erlang/otp/commit/5ed603a1211b83b8be2d1fc06d3f3bf30c3c9759 Patch
- https://github.com/erlang/otp/commit/9e0ac85d3485e7898e0da88a14be0ee2310a3b28 Patch
- https://github.com/erlang/otp/security/advisories/GHSA-4749-w85x-hw9h Mitigation
- https://osv.dev/vulnerability/EEF-CVE-2026-23942 Vendor Advisory
- https://www.erlang.org/doc/system/versions.html#order-of-versions Product
Timeline
- nvd_ingest NVD