CVE-2026-47187

A flaw was found in SSHFS. A malicious SFTP (Secure File Transfer Protocol) server can supply crafted symbolic links containing absolute paths or parent directory traversal sequences that are resolved by the client system. When a local user or automated tool accesses or copies files through the mounted directory, these links can escape the mount point, enabling the server to read or overwrite arbitrary local client files. This vulnerability can lead to sensitive information disclosure or arbitrary code execution if critical files are overwritten.

The fuse-sshfs package in RHEL 8 is only available in Codeready repo which is no longer supported. See https://access.redhat.com/solutions/4180391

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.