CVE-2022-27052: Freesshd Freeftpd

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

FreeFtpd version 1.0.13 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges.

Affected products

• Freesshd Freeftpd: before 1.0.13 (fixed in 1.0.13)

Published 2022-03-31. Last modified 2026-06-17.