Improper Enforcement of Message Integrity During Transmission in a Communication Channel in Erlang OTP - CVE-2026-54891

Vulnerability identifier: #VU136825

CSH Severity: Medium

CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-54891

CWE-ID: CWE-924

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to inject plaintext data into a TLS client application.

The vulnerability exists due to improper enforcement of message integrity during transmission in the (d)tls client handshake handling when a man-in-the-middle interferes before the handshake completes. A remote attacker can inject plaintext data before handshake completion to inject plaintext data into a TLS client application.

The injected data may be delivered to the client application after a successful handshake. The injection window is smaller for TLS 1.3 than for earlier TLS versions.

Erlang OTP
SUSE Linux Enterprise Server 15 SP6
Debian Linux
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Real Time 15
Server Applications Module
openSUSE Leap
openEuler
Fedora
PowerVC
erlang-observer
erlang-debugger
erlang-crypto
erlang-compiler
erlang-common_test
erlang-asn1
erlang
erlang-megaco
erlang-mnesia
erlang-debuginfo
erlang-odbc
erlang-os_mon
erlang-parsetools
erlang-public_key
erlang-reltool
erlang-runtime_tools
erlang-sasl
erlang-erts
erlang-kernel
erlang-jinterface
erlang-inets
erlang-hipe
erlang-ftp
erlang-examples
erlang-eunit
erlang-et
erlang-snmp
erlang-erl_interface
erlang-erl_docgen
erlang-eldap
erlang-edoc
erlang-diameter
erlang-dialyzer
erlang-debugsource
erlang-ssh
erlang-ssl
erlang-stdlib
erlang-syntax_tools
erlang-tftp
erlang-tools
erlang-wx
erlang-xmerl
erlang-reltool-src
erlang-jinterface-src
erlang-diameter-src
erlang-doc
erlang-src
erlang-observer-src
erlang-dialyzer-src
erlang-wx-src
erlang-dialyzer-debuginfo
erlang-et-src
erlang-debugger-src
erlang-wx-debuginfo
erlang-epmd
erlang-epmd-debuginfo
erlang26-dialyzer-src
erlang26-et-src
erlang26
erlang26-epmd
erlang26-jinterface
erlang26-wx-src
erlang26-diameter-src
erlang26-wx
erlang26-et
erlang26-debugger
erlang26-reltool-src
erlang26-reltool
erlang26-debugger-src
erlang26-dialyzer-debuginfo
erlang26-debugsource
erlang26-epmd-debuginfo
erlang26-doc
erlang26-diameter
erlang26-wx-debuginfo
erlang26-observer-src
erlang26-src
erlang26-debuginfo
erlang26-observer
erlang26-dialyzer
erlang26-jinterface-src
erlang27-src
erlang27-dialyzer-debuginfo
erlang27-reltool-src
erlang27-dialyzer
erlang27-debuginfo
erlang27-diameter-src
erlang27-epmd
erlang27
erlang27-dialyzer-src
erlang27-debugsource
erlang27-reltool
erlang27-jinterface-src
erlang27-jinterface
erlang27-epmd-debuginfo
erlang27-diameter
erlang (Debian package)

Install security update from vendor's website.

Erlang OTP - addressed in versions 27.3.4.14, 28.5.0.3, 29.0.3
erlang-observer - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-debugger - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-crypto - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-compiler - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-common_test - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-asn1 - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-megaco - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-mnesia - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-debuginfo - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-odbc - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-os_mon - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-parsetools - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-public_key - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-reltool - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-runtime_tools - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-sasl - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-erts - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-kernel - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-jinterface - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-inets - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-hipe - update to 23.3.4.9-11
erlang-ftp - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-examples - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-eunit - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-et - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-snmp - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-erl_interface - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-erl_docgen - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-eldap - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-edoc - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-diameter - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-dialyzer - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-debugsource - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-ssh - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-ssl - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-stdlib - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-syntax_tools - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-tftp - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-tools - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-wx - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-xmerl - addressed in versions 23.3.4.9-11, 25.3.2.6-18
erlang-et - update to 23.3.4.19-150300.3.39.1
erlang-debugger - update to 23.3.4.19-150300.3.39.1
erlang-reltool - update to 23.3.4.19-150300.3.39.1
erlang-reltool-src - update to 23.3.4.19-150300.3.39.1
erlang-jinterface-src - update to 23.3.4.19-150300.3.39.1
erlang-diameter-src - update to 23.3.4.19-150300.3.39.1
erlang-doc - update to 23.3.4.19-150300.3.39.1
erlang-src - update to 23.3.4.19-150300.3.39.1
erlang-observer-src - update to 23.3.4.19-150300.3.39.1
erlang-jinterface - update to 23.3.4.19-150300.3.39.1
erlang-dialyzer-src - update to 23.3.4.19-150300.3.39.1
erlang-wx-src - update to 23.3.4.19-150300.3.39.1
erlang-wx - update to 23.3.4.19-150300.3.39.1
erlang-dialyzer-debuginfo - update to 23.3.4.19-150300.3.39.1
erlang-et-src - update to 23.3.4.19-150300.3.39.1
erlang-diameter - update to 23.3.4.19-150300.3.39.1
erlang-debugger-src - update to 23.3.4.19-150300.3.39.1
erlang-wx-debuginfo - update to 23.3.4.19-150300.3.39.1
erlang-dialyzer - update to 23.3.4.19-150300.3.39.1
erlang-debuginfo - update to 23.3.4.19-150300.3.39.1
erlang-epmd - update to 23.3.4.19-150300.3.39.1
erlang - update to 23.3.4.19-150300.3.39.1
erlang-debugsource - update to 23.3.4.19-150300.3.39.1
erlang-epmd-debuginfo - update to 23.3.4.19-150300.3.39.1
erlang-observer - update to 23.3.4.19-150300.3.39.1
erlang-src - update to 25.3.2.6-18
erlang26-dialyzer-src - update to 26.2.1-150300.7.28.1
erlang26-et-src - update to 26.2.1-150300.7.28.1
erlang26 - update to 26.2.1-150300.7.28.1
erlang26-epmd - update to 26.2.1-150300.7.28.1
erlang26-jinterface - update to 26.2.1-150300.7.28.1
erlang26-wx-src - update to 26.2.1-150300.7.28.1
erlang26-diameter-src - update to 26.2.1-150300.7.28.1
erlang26-wx - update to 26.2.1-150300.7.28.1
erlang26-et - update to 26.2.1-150300.7.28.1
erlang26-debugger - update to 26.2.1-150300.7.28.1
erlang26-reltool-src - update to 26.2.1-150300.7.28.1
erlang26-reltool - update to 26.2.1-150300.7.28.1
erlang26-debugger-src - update to 26.2.1-150300.7.28.1
erlang26-dialyzer-debuginfo - update to 26.2.1-150300.7.28.1
erlang26-debugsource - update to 26.2.1-150300.7.28.1
erlang26-epmd-debuginfo - update to 26.2.1-150300.7.28.1
erlang26-doc - update to 26.2.1-150300.7.28.1
erlang26-diameter - update to 26.2.1-150300.7.28.1
erlang26-wx-debuginfo - update to 26.2.1-150300.7.28.1
erlang26-observer-src - update to 26.2.1-150300.7.28.1
erlang26-src - update to 26.2.1-150300.7.28.1
erlang26-debuginfo - update to 26.2.1-150300.7.28.1
erlang26-observer - update to 26.2.1-150300.7.28.1
erlang26-dialyzer - update to 26.2.1-150300.7.28.1
erlang26-jinterface-src - update to 26.2.1-150300.7.28.1
erlang - addressed in versions 26.2.5.21-4.fc43, 26.2.5.21-4.fc44
erlang27-src - update to 27.1.3-150300.7.7.1
erlang27-dialyzer-debuginfo - update to 27.1.3-150300.7.7.1
erlang27-reltool-src - update to 27.1.3-150300.7.7.1
erlang27-dialyzer - update to 27.1.3-150300.7.7.1
erlang27-debuginfo - update to 27.1.3-150300.7.7.1
erlang27-diameter-src - update to 27.1.3-150300.7.7.1
erlang27-epmd - update to 27.1.3-150300.7.7.1
erlang27 - update to 27.1.3-150300.7.7.1
erlang27-dialyzer-src - update to 27.1.3-150300.7.7.1
erlang27-debugsource - update to 27.1.3-150300.7.7.1
erlang27-reltool - update to 27.1.3-150300.7.7.1
erlang27-jinterface-src - update to 27.1.3-150300.7.7.1
erlang27-jinterface - update to 27.1.3-150300.7.7.1
erlang27-epmd-debuginfo - update to 27.1.3-150300.7.7.1
erlang27-diameter - update to 27.1.3-150300.7.7.1
erlang (Debian package) - update to 1:27.3.4.1+dfsg-1+deb13u3

• https://github.com/erlang/otp/security/advisories/GHSA-gf6r-99xw-6qg6

• Multiple vulnerabilities in otp
• Fedora 44 update for erlang
• Fedora 43 update for erlang
• openEuler 24.03 LTS SP1 update for erlang
• openEuler 22.03 LTS SP4 update for erlang
• openEuler 24.03 LTS SP4 update for erlang
• openEuler 24.03 LTS SP3 update for erlang
• Debian update for erlang
• SUSE update for erlang26
• SUSE update for erlang
• SUSE update for erlang27
• Multiple vulnerabilities in IBM PowerVC