What is CVE-2026-44711?

CVE-2026-44711 is a high-severity vulnerability in Mcdope Pam_usb, classified under Improper Link Resolution Before File Access. CVSS score: 7.9/10. Published 2026-05-27.

How severe is CVE-2026-44711?

High severity. CVSS v3 base score is 7.9 out of 10.

Auth bypass in Mcdope Pam_usb

CVE-2026-44711

pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, symlink attacks on pad directory and pad files enable authentication bypass and root file corruption. This vulnerability is fixed in 0.8.7.

EPSS: 0.000 (6.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.9 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H.

Affected products

Mcdope Pam_usb — versions < 0.8.7

Weakness classification (CWE)

CWE-59 — Improper Link Resolution Before File Access
CWE-287 — Improper Authentication

References

security-advisories@github.com (x_refsource_CONFIRM)
134c704f-9b21-4f2e-91b3-4a467353bcc0

Frequently asked questions

What is CVE-2026-44711?: CVE-2026-44711 is a high-severity vulnerability in Mcdope Pam_usb, classified under Improper Link Resolution Before File Access. CVSS score: 7.9/10. Published 2026-05-27.
How severe is CVE-2026-44711?: High severity. CVSS v3 base score is 7.9 out of 10.