SSHFS Flaws Enable Local Code Execution and File Escape

Two vulnerabilities in sshfs were disclosed and fixed in version 3.7.6, affecting versions up to 3.7.5. The more severe issue, CVE-2026-47187, is a symlink escape flaw that lets a rogue SFTP server trick the client into reading from or writing to unintended paths on the local filesystem by returning unsafe symlink targets. The second bug, CVE-2026-48711, is an argument injection weakness in hostname parsing that can turn a crafted mount source into an SSH option, enabling arbitrary local command execution under specific conditions and, in some cases, without requiring SSH authentication.

Public technical details and exploit code have now been released, raising the risk of active abuse against systems that use sshfs to mount remote directories over SFTP. The flaws were privately reported by Abhinav Agarwal and addressed through a coordinated release, but defenders are being urged to upgrade immediately to sshfs 3.7.6 or later and verify trusted remote server keys, as a malicious or spoofed server could otherwise trigger client-side compromise.