Description
Relative Path Traversal, Improper Isolation or Compartmentalization vulnerability in erlang otp erlang/otp (tftp_file modules), erlang otp inets (tftp_file modules), erlang otp tftp (tftp_file modules) allows Relative Path Traversal. This vulnerability is associated with program files lib/tftp/src/tftp_file.erl, src/tftp_file.erl. This issue affects otp: from 17.0, from 07b8f441ca711f9812fad9e9115bab3c3aa92f79; otp: from 5.10 before 7.0; otp: from 1.0.
Scores
CVSS v4
2.3
EPSS
0.0003
EPSS Percentile
9.0%
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-23
Status
published
Products (6)
Erlang/OTP
07b8f441ca711f9812fad9e9115bab3c3aa92f79
Erlang/OTP
1.0
Erlang/OTP
17.0
Erlang/OTP
5.10 - 7.0
Erlang/OTP
pkg:otp/[email protected] - pkg:otp/[email protected]
Erlang/OTP
pkg:otp/[email protected] - pkg:otp/tftp@*
Published
Feb 20, 2026
Tracked Since
Feb 20, 2026