Path Traversal in Open-Iscsi
CVE-2026-44943
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers to create root-owned files outside the database and inject lines into the record. This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.004 (32.0th percentile) — read the EPSS interpretation.
Affected products
- Open-iscsi — versions ?