Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-44943

remote limited file-write as root via discovery in open-iscsi

Description

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers  to create root-owned files outside the database and inject lines into the record. This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

open-iscsi open-iscsi

Default version status: unaffected

  • ? to ≤ 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237eaffected

References