{"id":"CVE-2026-47187","aliases":["ALPINE-CVE-2026-47187","AZL-97011","DEBIAN-CVE-2026-47187","EUVD-2026-62493","GHSA-pjv6-2c3f-r357","UBUNTU-CVE-2026-47187","openSUSE-SU-2026:10952-1","openSUSE-SU-2026:20915-1"],"status":"published","title":"SSHFS Symlink Escape: Rogue SFTP Server → Local File Read/Write","description":"SSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP server can return absolute symlink targets or relative targets containing parent-directory components that SSHFS passes through FUSE for resolution by the client kernel against the local filesystem. The documented transform_symlinks mitigation does not contain relative targets because transform_symlink() returns early at sshfs.c:2181, while sshfs_readlink() at sshfs.c:2234 to sshfs.c:2236 otherwise copies the server-supplied link target to the kernel. A victim or victim-side tool that follows such a link through ordinary operations such as cp, rsync, backup tooling, or an editor can disclose readable local files back to the server or write server-controlled content to writable local files, potentially including startup or scheduled-task files. This issue is fixed in version 3.7.6.","severity":{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00496,"percentile":0.43027,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-59"],"published":"2026-06-03T00:00:00Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"Alpine:v3.20","package":"sshfs","fixed_in":["3.7.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"sshfs","fixed_in":["3.7.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"sshfs","fixed_in":["3.7.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"sshfs","fixed_in":["3.7.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"sshfs","fixed_in":["3.7.6-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"sshfs-fuse","fixed_in":["3.7.3-1.2~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"sshfs-fuse","fixed_in":["3.7.3-1.2~deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"sshfs-fuse","fixed_in":["3.7.3-1.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.20","package":"sshfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"sshfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"sshfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"sshfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"sshfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"fuse-sshfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"3.7.3-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"sshfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-1.2~deb12u1"}]}],"versions":["3.7.3-1.1"]},{"source":"osv","ecosystem":"Debian:13","package":"sshfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-1.2~deb13u1"}]}],"versions":["3.7.3-1.1","3.7.3-1.2~deb12u1"]},{"source":"osv","ecosystem":"Debian:14","package":"sshfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-1.2"}]}],"versions":["3.7.3-1.1","3.7.3-1.2~deb12u1","3.7.3-1.2~deb13u1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"sshfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.5-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"sshfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"sshfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.10+repack-2","3.6.0+repack-1","3.6.0+repack+really2.10-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"sshfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6.0+repack+really2.10-0ubuntu1","3.7.1+repack-2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"sshfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.7.3-1.1build1","3.7.3-1.1build2","3.7.3-1.1build3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"sshfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.7.3-1.1build3","3.7.3-1.1build4"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"sshfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.7.3-1.1build5","3.7.3-1.2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"sshfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.7.3-1.1build4","3.7.3-1.1build5"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"sshfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-1.1"}]}],"bundled":2}],"products":[{"vendor":"libfuse","product":"sshfs"}],"references":[{"url":"https://github.com/libfuse/sshfs/security/advisories/GHSA-pjv6-2c3f-r357","tags":["x_refsource_CONFIRM","advisory","report"]},{"url":"https://github.com/libfuse/sshfs/pull/361","tags":["x_refsource_MISC","fix","report"]},{"url":"https://github.com/libfuse/sshfs/commit/bcd132f17ccf1b8592a229df797c9b08883fec26","tags":["x_refsource_MISC","fix"]},{"url":"https://github.com/libfuse/sshfs/releases/tag/sshfs-3.7.6","tags":["x_refsource_MISC","web"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-47187","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47187","tags":["web","advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/47xxx/CVE-2026-47187.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-47187","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-47187","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-47187","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2026/05/30/3","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48711","tags":["web"]},{"url":"https://bugzilla.suse.com/1267016","tags":["report"]},{"url":"https://bugzilla.suse.com/1267017","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-47187","title":"SSHFS Symlink Escape: Rogue SFTP Server → Local File Read/Write","description":"SSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP server can return absolute symlink targets or relative targets containing parent-directory components that SSHFS passes through FUSE for resolution by the client kernel against the local filesystem. The documented transform_symlinks mitigation does not contain relative targets because transform_symlink() returns early at sshfs.c:2181, while sshfs_readlink() at sshfs.c:2234 to sshfs.c:2236 otherwise copies the server-supplied link target to the kernel. A victim or victim-side tool that follows such a link through ordinary operations such as cp, rsync, backup tooling, or an editor can disclose readable local files back to the server or write server-controlled content to writable local files, potentially including startup or scheduled-task files. This issue is fixed in version 3.7.6.","status":"published","published":"2026-08-19T14:41:57.512Z","modified":"2026-08-20T18:29:10.307Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"critical","assessor":"cna"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T13:36:40.478484Z"}],"euvd":[{"id":"EUVD-2026-62493","description":"SSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP server can return absolute symlink targets or relative targets containing parent-directory components that SSHFS passes through FUSE for resolution by the client kernel against the local filesystem. The documented transform_symlinks mitigation does not contain relative targets because transform_symlink() returns early at sshfs.c:2181, while sshfs_readlink() at sshfs.c:2234 to sshfs.c:2236 otherwise copies the server-supplied link target to the kernel. A victim or victim-side tool that follows such a link through ordinary operations such as cp, rsync, backup tooling, or an editor can disclose readable local files back to the server or write server-controlled content to writable local files, potentially including startup or scheduled-task files. This issue is fixed in version 3.7.6.","status":"published","published":"2026-08-19T14:41:57Z","modified":"2026-08-20T18:29:10Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T18:01:38.846525Z"}],"nvd":[{"id":"CVE-2026-47187","description":"SSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP server can return absolute symlink targets or relative targets containing parent-directory components that SSHFS passes through FUSE for resolution by the client kernel against the local filesystem. The documented transform_symlinks mitigation does not contain relative targets because transform_symlink() returns early at sshfs.c:2181, while sshfs_readlink() at sshfs.c:2234 to sshfs.c:2236 otherwise copies the server-supplied link target to the kernel. A victim or victim-side tool that follows such a link through ordinary operations such as cp, rsync, backup tooling, or an editor can disclose readable local files back to the server or write server-controlled content to writable local files, potentially including startup or scheduled-task files. This issue is fixed in version 3.7.6.","status":"published","published":"2026-08-19T15:17:05.31Z","modified":"2026-09-09T21:13:25.91Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"critical","assessor":"secondary"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T14:12:39.962615Z"}],"osv":[{"id":"ALPINE-CVE-2026-47187","description":"SSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP server can return absolute symlink targets or relative targets containing parent-directory components that SSHFS passes through FUSE for resolution by the client kernel against the local filesystem. The documented transform_symlinks mitigation does not contain relative targets because transform_symlink() returns early at sshfs.c:2181, while sshfs_readlink() at sshfs.c:2234 to sshfs.c:2236 otherwise copies the server-supplied link target to the kernel. A victim or victim-side tool that follows such a link through ordinary operations such as cp, rsync, backup tooling, or an editor can disclose readable local files back to the server or write server-controlled content to writable local files, potentially including startup or scheduled-task files. This issue is fixed in version 3.7.6.","status":"published","published":"2026-08-19T15:17:05.31Z","modified":"2026-10-01T02:17:49.315145943Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:27:50.764331Z"},{"id":"CVE-2026-47187","title":"SSHFS Symlink Escape: Rogue SFTP Server → Local File Read/Write","description":"SSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP server can return absolute symlink targets or relative targets containing parent-directory components that SSHFS passes through FUSE for resolution by the client kernel against the local filesystem. The documented transform_symlinks mitigation does not contain relative targets because transform_symlink() returns early at sshfs.c:2181, while sshfs_readlink() at sshfs.c:2234 to sshfs.c:2236 otherwise copies the server-supplied link target to the kernel. A victim or victim-side tool that follows such a link through ordinary operations such as cp, rsync, backup tooling, or an editor can disclose readable local files back to the server or write server-controlled content to writable local files, potentially including startup or scheduled-task files. This issue is fixed in version 3.7.6.","status":"published","published":"2026-08-19T14:41:57.512Z","modified":"2026-10-28T10:55:24.494763266Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"critical"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T15:45:06.231145Z"},{"id":"DEBIAN-CVE-2026-47187","description":"SSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP server can return absolute symlink targets or relative targets containing parent-directory components that SSHFS passes through FUSE for resolution by the client kernel against the local filesystem. The documented transform_symlinks mitigation does not contain relative targets because transform_symlink() returns early at sshfs.c:2181, while sshfs_readlink() at sshfs.c:2234 to sshfs.c:2236 otherwise copies the server-supplied link target to the kernel. A victim or victim-side tool that follows such a link through ordinary operations such as cp, rsync, backup tooling, or an editor can disclose readable local files back to the server or write server-controlled content to writable local files, potentially including startup or scheduled-task files. This issue is fixed in version 3.7.6.","status":"published","published":"2026-08-19T15:17:05.31Z","modified":"2026-10-01T03:03:24.765765154Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:45:56.444225Z"},{"id":"UBUNTU-CVE-2026-47187","description":"SSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP server can return absolute symlink targets or relative targets containing parent-directory components that SSHFS passes through FUSE for resolution by the client kernel against the local filesystem. The documented transform_symlinks mitigation does not contain relative targets because transform_symlink() returns early at sshfs.c:2181, while sshfs_readlink() at sshfs.c:2234 to sshfs.c:2236 otherwise copies the server-supplied link target to the kernel. A victim or victim-side tool that follows such a link through ordinary operations such as cp, rsync, backup tooling, or an editor can disclose readable local files back to the server or write server-controlled content to writable local files, potentially including startup or scheduled-task files. This issue is fixed in version 3.7.6.","status":"published","published":"2026-08-19T15:17:00Z","modified":"2026-10-17T13:00:15.973749379Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T16:56:30.797112Z"},{"id":"AZL-97011","title":"CVE-2026-47187 affecting package fuse-sshfs 3.7.3-1","description":"SSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP server can return absolute symlink targets or relative targets containing parent-directory components that SSHFS passes through FUSE for resolution by the client kernel against the local filesystem. The documented transform_symlinks mitigation does not contain relative targets because transform_symlink() returns early at sshfs.c:2181, while sshfs_readlink() at sshfs.c:2234 to sshfs.c:2236 otherwise copies the server-supplied link target to the kernel. A victim or victim-side tool that follows such a link through ordinary operations such as cp, rsync, backup tooling, or an editor can disclose readable local files back to the server or write server-controlled content to writable local files, potentially including startup or scheduled-task files. This issue is fixed in version 3.7.6.","status":"published","published":"2026-08-19T15:17:05Z","modified":"2026-11-05T05:36:30Z","updated_at":"2026-11-05T16:41:26.280152Z"},{"id":"openSUSE-SU-2026:10952-1","title":"sshfs-3.7.6-1.1 on GA media","description":"These are all security issues fixed in the sshfs-3.7.6-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-06-03T00:00:00Z","modified":"2026-06-04T09:00:10.043559952Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:20915-1","title":"Security update for sshfs","description":"This update for sshfs fixes the following issues:\n\nChanges in sshfs:\n\n- Update to 3.7.6:\n  - Added new maintainer: abhinavagarwal07 Abhinav Agarwal\n  - CVE-2026-47187: Fixed critical vulnerability - Symlink\n    Escape: Rogue SFTP Server to Local File Read/Write), credit\n    to abhinavagarwal07 (bsc#1267017)\n  - New -o contain_symlinks and -o no_contain_symlinks to control\n    symlink containment behavior\n  - CVE-2026-48711: Fixed high severity vulnerability - Improper\n    Neutralization of Argument Delimiters in a Command ('Argument\n    Injection'), credit to abhinavagarwal07 (bsc#1267016)\n  - Fixed null-deref warning in tokenize_on_space, promote\n    strict-warnings to required\n  - Added a number of tests in CI, including rename, chmod,\n    fsync, statvfs values, error paths, option coverage\n  - Fixed malformed SFTP reply handling\n\n- Update to 3.7.5:\n  * Implement connect to vsock\n  * use latest major version for actions/checkout\n  * Fix memleak in cache after readlink\n  * Fill stat info when returning cached data for readdir\n  * ipv6 support for directport connection\n- reverts to original fork\n\n- Don't globstar files in shared directory _bindir.\n\n- build the man page\n","status":"published","published":"2026-06-05T21:40:06Z","modified":"2026-06-09T09:00:07.240799459Z","updated_at":"2026-11-02T16:58:41.885092Z"}]}}