Red Hat FUSE libfuse vulnerabilities enable code execution

CERT-Bund published Security Advisory WID-SEC-2026-0913 addressing multiple vulnerabilities in Red Hat FUSE libfuse versions before 3.18.2. The vulnerabilities carry a CVSS Base Score of 7.8 (high) and a Temporal Score of 7.0 (high). A local attacker can exploit these flaws to execute arbitrary code or cause denial-of-service conditions.

Organizations using Red Hat FUSE or libfuse should immediately identify affected systems and update to version 3.18.2 or later. System administrators and security teams should review the mitigation measures provided in the advisory and assess their exposure to local attack vectors. No specific compliance deadline was stated; however, given the high severity and remote code execution capability, immediate patching is recommended.