Relative Path Traversal Vulnerability in Erlang OTP TFTP Modules

CVE-2026-21620

What is CVE-2026-21620?

A vulnerability exists in the TFTP file modules of Erlang OTP, allowing attackers to exploit relative path traversal. This flaw enables unauthorized access to files and directories outside the intended scope, potentially leading to data leakage or other malicious actions. The issue lies within the program files located in lib/tftp/src/tftp_file.erl, presenting risk in multiple versions of Erlang OTP. Updating to the latest patched versions is strongly recommended to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References