libfuse

Products

ProductCVEsExploitedLatest
libfuse2–Mar 20, 2026
sshfs2–Aug 19, 2026

Exploited and recent CVEs

  • CVE-2026-48711 High 7.0 SSHFS: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') 0.2%
  • CVE-2026-47187 Critical 9.3 SSHFS Symlink Escape: Rogue SFTP Server → Local File Read/Write 0.5%
  • CVE-2026-33150 High 7.8 Use After Free in libfuse 0.3%
  • CVE-2026-33179 Medium 5.5 libfuse: NULL Pointer Dereference and Memory Leak in io_uring Queue Initialization 0.2%