Auth bypass in Open-Iscsi
CVE-2026-44944
An Incorrect Authorization vulnerability in open-iscsi allows unprivilidged local users to use the isscsiuio control socket. This issue affects open-iscsi: from ? through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.
Vulnerability class: Broken Access Control
EPSS: 0.001 (0.6th percentile) — read the EPSS interpretation.
Affected products
- Open-iscsi — versions ?