Libfuse vulnerabilities

Products

• Libfuse 2
• Sshfs 2

Newest

• libfuse sshfs SSHFS: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') CVE-2026-48711 Fix available 7.0 HighJune 3, 2026
• libfuse sshfs SSHFS Symlink Escape: Rogue SFTP Server → Local File Read/Write CVE-2026-47187 Fix available 9.3 CriticalJune 3, 2026
• libfuse, red hat enterprise linux 7, enterprise linux 8 +2 more Use After Free in libfuse CVE-2026-33150 Public exploitFix available 7.8 HighMarch 20, 2026
• libfuse libfuse: NULL Pointer Dereference and Memory Leak in io_uring Queue Initialization CVE-2026-33179 Fix available 5.5 MediumMarch 20, 2026