A vulnerability labeled as critical has been found in Erlang OTP up to 6.x/inets@6.x. This issue affects some unknown processing in the library lib/tftp/src/tftp_file.erl of the component tftp_file. Executing a manipulation can lead to relative path traversal.
This vulnerability appears as CVE-2026-21620. The attack may be performed from remote. There is no available exploit.
The affected component should be upgraded.
