CVE-2026-54886 | Erlang OTP up to 3.0.0/6.0.1/16.x/29.0.2 SFTP Protocol ssh_sftpd.erl infinite loop

SecurityVulns
Yanac

A vulnerability, which was classified as problematic, has been found in Erlang OTP up to 3.0.0/6.0.1/16.x/29.0.2. This affects an unknown part in the library lib/ssh/src/ssh_sftpd.erl of the component SFTP Protocol. The manipulation leads to infinite loop.

This vulnerability is documented as CVE-2026-54886. The attack requires being on the local network. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More