Relative Path Traversal, Improper Isolation or Compartmentalization vulnerability in erlang otp erlang/otp (tftp_file modules), erlang otp inets (tftp_file modules), erlang otp tftp (tftp_file modules) allows Relative Path Traversal. This vulnerability is associated with program files lib/tftp/src/tftp_file.erl, src/tftp_file.erl.
This issue affects OTP from OTP 17.0 before OTP 28.3.2, OTP 27.3.4.8 and OTP 26.2.5.17, corresponding to tftp from 1.0 before 1.2.4, 1.2.2.1 and 1.1.1.1; also inets from 5.10 before 7.0.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade erlang | May 19, 2026 | May 19, 2026 |
| Ubuntu | — | Upgrade erlang-eunit (Ubuntu Pro)Upgrade erlang-src (Ubuntu Pro)Upgrade erlang-eldapUpgrade erlang-tools (Ubuntu Pro)Upgrade erlang-baseUpgrade erlang-reltoolUpgrade erlang-gs (Ubuntu Pro)Upgrade erlang-mnesia (Ubuntu Pro)Upgrade erlang-etUpgrade erlang-public-key (Ubuntu Pro)Upgrade erlang-toolbar (Ubuntu Pro)Upgrade erlang-eldap (Ubuntu Pro)Upgrade erlang-pman (Ubuntu Pro)Upgrade erlang-webtool (Ubuntu Pro)Upgrade erlang-dialyzer (Ubuntu Pro)Upgrade erlang-snmpUpgrade erlang-runtime-toolsUpgrade erlang-syntax-toolsUpgrade erlang-modeUpgrade erlang (Ubuntu Pro)Upgrade erlang-nox (Ubuntu Pro)Upgrade erlang-odbc (Ubuntu Pro)Upgrade erlang-observerUpgrade erlang-os-monUpgrade erlang-runtime-tools (Ubuntu Pro)Upgrade erlang-ssl (Ubuntu Pro)Upgrade erlang-x11Upgrade erlang-base (Ubuntu Pro)Upgrade erlang-inets (Ubuntu Pro)Upgrade erlangUpgrade erlang-sslUpgrade erlang-diameter (Ubuntu Pro)Upgrade erlang-megacoUpgrade erlang-tftp (Ubuntu Pro)Upgrade erlang-common-test (Ubuntu Pro)Upgrade erlang-tv (Ubuntu Pro)Upgrade erlang-typer (Ubuntu Pro)Upgrade erlang-parsetools (Ubuntu Pro)Upgrade erlang-jinterface (Ubuntu Pro)Upgrade erlang-wx (Ubuntu Pro)Upgrade erlang-dev (Ubuntu Pro)Upgrade erlang-public-keyUpgrade erlang-srcUpgrade erlang-debugger (Ubuntu Pro)Upgrade erlang-sshUpgrade erlang-examplesUpgrade erlang-megaco (Ubuntu Pro)Upgrade erlang-erl-docgen (Ubuntu Pro)Upgrade erlang-edoc (Ubuntu Pro)Upgrade erlang-doc (Ubuntu Pro)Upgrade erlang-ftp (Ubuntu Pro)Upgrade erlang-jinterfaceUpgrade erlang-odbcUpgrade erlang-inetsUpgrade erlang-observer (Ubuntu Pro)Upgrade erlang-reltool (Ubuntu Pro)Upgrade erlang-x11 (Ubuntu Pro)Upgrade erlang-asn1Upgrade erlang-mnesiaUpgrade erlang-tftpUpgrade erlang-diameterUpgrade erlang-ic-java (Ubuntu Pro)Upgrade erlang-appmon (Ubuntu Pro)Upgrade erlang-edocUpgrade erlang-debuggerUpgrade erlang-manpages (Ubuntu Pro)Upgrade erlang-xmerl (Ubuntu Pro)Upgrade erlang-test-server (Ubuntu Pro)Upgrade erlang-et (Ubuntu Pro)Upgrade erlang-corba (Ubuntu Pro)Upgrade erlang-asn1 (Ubuntu Pro)Upgrade erlang-xmerlUpgrade erlang-ftpUpgrade erlang-os-mon (Ubuntu Pro)Upgrade erlang-percept (Ubuntu Pro)Upgrade erlang-docUpgrade erlang-devUpgrade erlang-syntax-tools (Ubuntu Pro)Upgrade erlang-dialyzerUpgrade erlang-wxUpgrade erlang-toolsUpgrade erlang-parsetoolsUpgrade erlang-eunitUpgrade erlang-snmp (Ubuntu Pro)Upgrade erlang-noxUpgrade erlang-examples (Ubuntu Pro)Upgrade erlang-crypto (Ubuntu Pro)Upgrade erlang-base-hipe (Ubuntu Pro)Upgrade erlang-manpagesUpgrade erlang-erl-docgenUpgrade erlang-cryptoUpgrade erlang-common-testUpgrade erlang-ssh (Ubuntu Pro)Upgrade erlang-mode (Ubuntu Pro)Upgrade erlang-ic (Ubuntu Pro) | Oct 12, 2026 | Oct 8, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 20, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub