An integer underflow in the volxlate function in Netatalk 3.0.0 through 4.4.2 allows a local privileged user to obtain limited information, modify… (CVE-2026-44069)

CVE-2026-44069 describes an integer underflow in the volxlate function within Netatalk versions 3.0.0 through 4.4.2. This vulnerability can be exploited by a local user with elevated privileges to gain limited information disclosure, perform limited data modification, or cause minor service disruption through specially crafted input related to volume translation.

The impact includes limited information disclosure, limited data modification, and minor service disruption. Exploitation requires local privileged access and high attack complexity, with no user interaction needed. The overall severity is medium.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vulnerability requires local privileged access and has high attack complexity, ensure that only trusted users have elevated privileges. Monitor vendor channels for official fixes or updates.