CVE-2011-0543: Fuse

Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Certain legacy functionality in fusermount in fuse 2.8.5 and earlier, when util-linux does not support the --no-canonicalize option, allows local users to bypass intended access restrictions and unmount arbitrary directories via a symlink attack.

Affected products

• Fuse Fuse: up to and including 2.8.5; version 1.9 only; version 2.0 only; version 2.1 only; version 2.2 only; version 2.2.1 only; …

Published 2011-09-02. Last modified 2026-06-16.