Incorrect authorization in Erlang OTP - CVE-2026-28808

Vulnerability identifier: #VU125777

CSH Severity: High

CVSS v4: 8.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-28808

CWE-ID: CWE-863

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to bypass authorization checks and access protected CGI scripts.

The vulnerability exists due to incorrect authorization in mod_auth and mod_cgi path resolution when handling requests to script_alias CGI targets located outside DocumentRoot. A remote attacker can send a request to a script_alias URL to bypass authorization checks and access protected CGI scripts.

Exploitation requires script_alias to map a URL prefix to a CGI directory outside DocumentRoot while directory-based access controls are configured to protect that external directory.

Erlang OTP
SUSE Linux Enterprise Server 15 SP5
Debian Linux
SUSE Linux Enterprise Server 15 SP6
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
Server Applications Module
openSUSE Leap
openEuler
Fedora
erlang-observer-src
erlang-dialyzer-src
erlang-debugger-src
erlang-dialyzer
erlang-debugsource
erlang
erlang-wx-src
erlang-wx
erlang-et-src
erlang-epmd
erlang-observer
erlang-wx-debuginfo
erlang-doc
erlang-epmd-debuginfo
erlang-diameter
erlang-src
erlang-et
erlang-diameter-src
erlang-reltool-src
erlang-jinterface-src
erlang-dialyzer-debuginfo
erlang-jinterface
erlang-reltool
erlang-debugger
erlang-debuginfo
erlang-compiler
erlang-crypto
erlang-common_test
erlang-asn1
erlang-erl_docgen
erlang-edoc
erlang-eldap
erlang-os_mon
erlang-xmerl
erlang-tools
erlang-tftp
erlang-syntax_tools
erlang-stdlib
erlang-ssl
erlang-ssh
erlang-snmp
erlang-sasl
erlang-runtime_tools
erlang-public_key
erlang-parsetools
erlang-erl_interface
erlang-odbc
erlang-mnesia
erlang-megaco
erlang-kernel
erlang-inets
erlang-ftp
erlang-examples
erlang-eunit
erlang-erts
erlang26-et
erlang26-doc
erlang26-debugger
erlang26-dialyzer
erlang26-src
erlang26-jinterface-src
erlang26-dialyzer-debuginfo
erlang26-reltool-src
erlang26-debugger-src
erlang26-observer-src
erlang26-diameter
erlang26-et-src
erlang26-diameter-src
erlang26-reltool
erlang26-dialyzer-src
erlang26-wx-debuginfo
erlang26-debuginfo
erlang26-debugsource
erlang26-epmd-debuginfo
erlang26-epmd
erlang26-jinterface
erlang26
erlang26-wx
erlang26-wx-src
erlang26-observer
erlang (Debian package)

Install security update from vendor's website.

Erlang OTP - addressed in versions 26.2.5.19, 27.3.4.10, 28.4.2
erlang-observer-src - update to 23.3.4.19-150300.3.32.1
erlang-dialyzer-src - update to 23.3.4.19-150300.3.32.1
erlang-debugger-src - update to 23.3.4.19-150300.3.32.1
erlang-dialyzer - update to 23.3.4.19-150300.3.32.1
erlang-debugsource - update to 23.3.4.19-150300.3.32.1
erlang - update to 23.3.4.19-150300.3.32.1
erlang-wx-src - update to 23.3.4.19-150300.3.32.1
erlang-wx - update to 23.3.4.19-150300.3.32.1
erlang-et-src - update to 23.3.4.19-150300.3.32.1
erlang-epmd - update to 23.3.4.19-150300.3.32.1
erlang-observer - update to 23.3.4.19-150300.3.32.1
erlang-wx-debuginfo - update to 23.3.4.19-150300.3.32.1
erlang-doc - update to 23.3.4.19-150300.3.32.1
erlang-epmd-debuginfo - update to 23.3.4.19-150300.3.32.1
erlang-diameter - update to 23.3.4.19-150300.3.32.1
erlang-src - update to 23.3.4.19-150300.3.32.1
erlang-et - update to 23.3.4.19-150300.3.32.1
erlang-diameter-src - update to 23.3.4.19-150300.3.32.1
erlang-reltool-src - update to 23.3.4.19-150300.3.32.1
erlang-jinterface-src - update to 23.3.4.19-150300.3.32.1
erlang-dialyzer-debuginfo - update to 23.3.4.19-150300.3.32.1
erlang-jinterface - update to 23.3.4.19-150300.3.32.1
erlang-reltool - update to 23.3.4.19-150300.3.32.1
erlang-debugger - update to 23.3.4.19-150300.3.32.1
erlang-debuginfo - update to 23.3.4.19-150300.3.32.1
erlang-compiler - update to 25.3.2.6-15
erlang-debugger - update to 25.3.2.6-15
erlang-crypto - update to 25.3.2.6-15
erlang - update to 25.3.2.6-15
erlang-common_test - update to 25.3.2.6-15
erlang-asn1 - update to 25.3.2.6-15
erlang-erl_docgen - update to 25.3.2.6-15
erlang-debuginfo - update to 25.3.2.6-15
erlang-debugsource - update to 25.3.2.6-15
erlang-dialyzer - update to 25.3.2.6-15
erlang-diameter - update to 25.3.2.6-15
erlang-edoc - update to 25.3.2.6-15
erlang-eldap - update to 25.3.2.6-15
erlang-os_mon - update to 25.3.2.6-15
erlang-xmerl - update to 25.3.2.6-15
erlang-wx - update to 25.3.2.6-15
erlang-tools - update to 25.3.2.6-15
erlang-tftp - update to 25.3.2.6-15
erlang-syntax_tools - update to 25.3.2.6-15
erlang-stdlib - update to 25.3.2.6-15
erlang-ssl - update to 25.3.2.6-15
erlang-ssh - update to 25.3.2.6-15
erlang-src - update to 25.3.2.6-15
erlang-snmp - update to 25.3.2.6-15
erlang-sasl - update to 25.3.2.6-15
erlang-runtime_tools - update to 25.3.2.6-15
erlang-reltool - update to 25.3.2.6-15
erlang-public_key - update to 25.3.2.6-15
erlang-parsetools - update to 25.3.2.6-15
erlang-erl_interface - update to 25.3.2.6-15
erlang-et - update to 25.3.2.6-15
erlang-odbc - update to 25.3.2.6-15
erlang-observer - update to 25.3.2.6-15
erlang-mnesia - update to 25.3.2.6-15
erlang-megaco - update to 25.3.2.6-15
erlang-kernel - update to 25.3.2.6-15
erlang-jinterface - update to 25.3.2.6-15
erlang-inets - update to 25.3.2.6-15
erlang-ftp - update to 25.3.2.6-15
erlang-examples - update to 25.3.2.6-15
erlang-eunit - update to 25.3.2.6-15
erlang-erts - update to 25.3.2.6-15
erlang26-et - update to 26.2.1-150300.7.25.1
erlang26-doc - update to 26.2.1-150300.7.25.1
erlang26-debugger - update to 26.2.1-150300.7.25.1
erlang26-dialyzer - update to 26.2.1-150300.7.25.1
erlang26-src - update to 26.2.1-150300.7.25.1
erlang26-jinterface-src - update to 26.2.1-150300.7.25.1
erlang26-dialyzer-debuginfo - update to 26.2.1-150300.7.25.1
erlang26-reltool-src - update to 26.2.1-150300.7.25.1
erlang26-debugger-src - update to 26.2.1-150300.7.25.1
erlang26-observer-src - update to 26.2.1-150300.7.25.1
erlang26-diameter - update to 26.2.1-150300.7.25.1
erlang26-et-src - update to 26.2.1-150300.7.25.1
erlang26-diameter-src - update to 26.2.1-150300.7.25.1
erlang26-reltool - update to 26.2.1-150300.7.25.1
erlang26-dialyzer-src - update to 26.2.1-150300.7.25.1
erlang26-wx-debuginfo - update to 26.2.1-150300.7.25.1
erlang26-debuginfo - update to 26.2.1-150300.7.25.1
erlang26-debugsource - update to 26.2.1-150300.7.25.1
erlang26-epmd-debuginfo - update to 26.2.1-150300.7.25.1
erlang26-epmd - update to 26.2.1-150300.7.25.1
erlang26-jinterface - update to 26.2.1-150300.7.25.1
erlang26 - update to 26.2.1-150300.7.25.1
erlang26-wx - update to 26.2.1-150300.7.25.1
erlang26-wx-src - update to 26.2.1-150300.7.25.1
erlang26-observer - update to 26.2.1-150300.7.25.1
erlang - addressed in versions 26.2.5.19-1.fc42, 26.2.5.19-1.fc43, 26.2.5.19-1.fc44
erlang (Debian package) - update to 1:27.3.4.1+dfsg-1+deb13u3

• https://github.com/erlang/otp/security/advisories/GHSA-3vhp-h532-mc3f

• Multiple vulnerabilities in otp
• Fedora 42 update for erlang
• Fedora 43 update for erlang
• Fedora 44 update for erlang
• SUSE update for erlang
• SUSE update for erlang26
• openEuler 24.03 LTS SP3 update for erlang
• openEuler 24.03 LTS SP1 update for erlang
• Debian update for erlang