TI-2026-38504 CVE-2026-53422
SFTP REALPATH path-existence oracle allowing filesystem enumeration outside configured root
Priority LOW 12
Observable Response Discrepancy vulnerability in Erlang OTP ssh (ssh_sftpd module) allows an authenticated SFTP user to enumerate the existence of files and directories outside the configured root directory.