CVE-2026-44072 — system() after failed chdir()

CVE-2026-44072

system() after failed chdir() PUBLISHED

Description (CNA)

Netatalk 2.2.1 through 4.4.2 calls system() after a failed chdir() without properly handling the error condition, which allows a local privileged user to execute unintended commands or cause a minor service disruption under specific conditions.

Affected (CNA)

Vendor / product	Versions
Netatalk / Netatalk	affected 2.2.1 through 4.4.2; unaffected 4.5.0

CWE

CWE-78

References

https://netatalk.io/security/CVE-2026-44072

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.