Security Research

CVE-2025-32433 Erlang/OTP SSH Pre-Auth RCE: Session Channel Eats Erlang Code

#Vulnerability Analysis#Code Audit#Cyber Attack
CVE-2025-32433 Erlang/OTP SSH Pre-Auth RCE: Session Channel Eats Erlang Code

Erlang/OTP’s SSH server hands client-sent “command strings” on session channels directly to the Erlang VM to parse and execute — after completing the SSH handshake, attackers send not a normal shell command but an Erlang expression (e.g. os:cmd("whoami")); OTP SSH executes it as code before authentication.

Unlock to view this content.