Observable Response Discrepancy in Erlang OTP's SFTP Module Affects Multiple Versions

CVE-2026-53422

What is CVE-2026-53422?

The vulnerability in Erlang OTP's ssh_sftpd module allows authenticated SFTP users to exploit differences in server responses for specific path requests. By sending crafted REALPATH requests, attackers can identify the existence of files and directories outside the configured root directory. This issue arises due to the handler's failure to properly validate and canonicalize paths, potentially enabling unauthorized insights into sensitive filesystem structures without granting access to the actual file contents. The information exposed could be leveraged for further attacks, particularly in conjunction with other known vulnerabilities.

References