CVE-2026-47078 | Erlang OTP stdlib zip module lib/stdlib/src/zip.erl zip:unzip/1/2/zip:extract/1/2 path traversal

A vulnerability marked as critical has been reported in Erlang OTP. Affected by this vulnerability is the function zip:unzip/1/2/zip:extract/1/2 of the file lib/stdlib/src/zip.erl of the component stdlib zip module. The manipulation leads to path traversal.

This vulnerability is documented as CVE-2026-47078. The attack can be initiated remotely. There is not any exploit available.