Vulnerabilities in Erlang/OTP

The Cyber Centre has released an advisory regarding multiple vulnerabilities affecting the Erlang Open Telecom Platform (OTP). The identified vulnerabilities, tracked as CVE-2026-65634 and CVE-2026-89422, impact several versions of the OTP framework. Affected branches include multiple release paths, with specific patch requirements documented for versions including 17.0, 22.2, 4.1.1, and 9.5. Given the foundational nature of Erlang/OTP in distributed systems and telecommunications, these vulnerabilities could potentially lead to service disruption or unauthorized system access if exploited. Organizations running Erlang environments should review their current build versions against the upstream security advisories provided by the Erlang/OTP project and apply the recommended version updates immediately.

Impact

Successful exploitation of these vulnerabilities could result in instability or compromise of systems relying on the Erlang/OTP runtime. While the specific impact of the identified CVEs is not detailed in the advisory, vulnerabilities in this runtime environment frequently allow for arbitrary code execution or significant denial-of-service conditions, affecting the integrity and availability of production applications.

Recommendation

• Upgrade Erlang/OTP installations to the secure versions as specified in the vendor security advisory.
• Review the official Erlang/OTP GitHub security advisories for specific release notes regarding CVE-2026-65634 and CVE-2026-89422.
• Audit infrastructure to identify all instances of Erlang/OTP to ensure comprehensive patching across the environment.