CVE-2026-44944 — iscsiuio control-socket authentication bypass in open-iscsi

CVE-2026-44944

iscsiuio control-socket authentication bypass in open-iscsi PUBLISHED

Description (CNA)

An Incorrect Authorization vulnerability in open-iscsi allows unprivilidged local users to use the isscsiuio control socket. This issue affects open-iscsi: from ? through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.

Affected (CNA)

Vendor / product	Versions
open-iscsi / open-iscsi	affected ? through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e

CWE

CWE-863

References

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-44944
https://github.com/open-iscsi/open-iscsi/commit/668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.