Incorrect Authorization in Open-iSCSI Affects Unprivileged Local Users

CVE-2026-44944

What is CVE-2026-44944?

The Open-iSCSI software has a vulnerability that permits unprivileged local users to access the isscsiuio control socket without proper authorization. This flaw can potentially lead to unauthorized interactions with system components, thus posing security concerns for system integrity and application security. It is crucial for users and administrators of Open-iSCSI to evaluate their setup and apply necessary measures to mitigate this risk.

References