CVE-2026-53422: erlang/otp from 17.0 (inclusive), before 27.3.4.14 (exclusive), from 28.0 (inclusive), before 28.5.0.3 (exclusive)…

Affected technology

erlang/otp · from 17.0 (inclusive), before 27.3.4.14 (exclusive)
erlang

erlang/otp · from 28.0 (inclusive), before 28.5.0.3 (exclusive)
erlang

erlang/otp · from 29.0 (inclusive), before 29.0.3 (exclusive)
erlang

erlang/ssh · from 3.0.1 (inclusive), before 5.2.11.9 (exclusive)
erlang

erlang/ssh · from 5.3 (inclusive), before 5.5.2.2 (exclusive)
erlang

erlang/ssh · from 6.0 (inclusive), before 6.0.2 (exclusive)
erlang

OTP · 3.0.1 to before *; status changes: 6.0.2 — unaffected, 5.5.2.2 — unaffected, 5.2.11.9 — unaffected
Erlang

OTP · 17.0 to before *; status changes: 29.0.3 — unaffected, 28.5.0.3 — unaffected, 27.3.4.14 — unaffected, 84adefa331c4159d432d22840663c38f155cd4c1 to before *; status changes: 059e5785ef8c1d423820ca633fb7b37f47645172 — unaffected, 86622cfaacf57a02c7645d1999f946846b504c94 — unaffected, c5a8f50ae68888ff243c5c741a06d2b3a4b48b7a — unaffected
Erlang

Component: ssh_sftpd
Function: ssh_sftpd:handle_op/4
File: src/ssh_sftpd.erl, lib/ssh/src/ssh_sftpd.erl

Attack conditions (Source advisory, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

An authenticated SFTP user can enumerate the existence of files and directories outside the configured root directory. Source advisory’s CVSS 4.0 assessment (base score 2.3/10) rates confidentiality impact as low; integrity and availability impact as none.