
CVE-2026-47187, CVE-2026-48711: sshfs <= 3.7.5 symlink escape (local file read/write) and ssh argument injection (local command execution) https://www.openwall.com/lists/oss-security/2026/05/30/3 Fixed in 3.7.6
Post summary
The text announces two sshfs vulnerabilities with symlink escape and command injection, notes they are fixed in version 3.7.6, but does not provide PoC or evidence of active exploitation.


