(An Incorrect Authorization vulnerability in open-iscsi allowsunprivili ...) (CVE-2026-44944)
(An Incorrect Authorization vulnerability in open-iscsi allowsunprivili ...)
AI Analysis
Technical Summary
The vulnerability in open-iscsi involves incorrect authorization checks that permit unprivileged local users to interact with the iscsuio control socket. This flaw could allow these users to perform actions or access information that should be restricted to privileged users. The affected versions include all versions up to commit 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e. There is no vendor advisory or patch information available at this time, and no known exploits in the wild have been reported.
Potential Impact
Unprivileged local users may gain unauthorized access to the iscsuio control socket, potentially allowing them to perform unauthorized operations or interfere with iSCSI control functions. This could lead to privilege escalation or disruption of iSCSI services on the affected system.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local user access to systems running open-iscsi and monitor for unauthorized access attempts to the iscsuio control socket.
(An Incorrect Authorization vulnerability in open-iscsi allowsunprivili ...) (CVE-2026-44944)
Description
(An Incorrect Authorization vulnerability in open-iscsi allowsunprivili ...)
CVSS v4.0
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in open-iscsi involves incorrect authorization checks that permit unprivileged local users to interact with the iscsuio control socket. This flaw could allow these users to perform actions or access information that should be restricted to privileged users. The affected versions include all versions up to commit 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e. There is no vendor advisory or patch information available at this time, and no known exploits in the wild have been reported.
Potential Impact
Unprivileged local users may gain unauthorized access to the iscsuio control socket, potentially allowing them to perform unauthorized operations or interfere with iSCSI control functions. This could lead to privilege escalation or disruption of iSCSI services on the affected system.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local user access to systems running open-iscsi and monitor for unauthorized access attempts to the iscsuio control socket.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-jm64-8832-wmmq
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-44944"]
- Ecosystems
- []
- Database Specific Severity
- HIGH
- Cvss Version
- 4.0
Threat ID: 6a6ae5559c2644c7f899bc2e
Added to database: 07/30/2026, 05:47:01 UTC
Last enriched: 07/30/2026, 07:25:23 UTC
Last updated: 07/31/2026, 21:29:05 UTC
Views: 8
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.