{
  "threat_severity" : "Important",
  "public_date" : "2026-07-29T12:58:49Z",
  "bugzilla" : {
    "description" : "open-iscsi: open-iscsi: Privilege Escalation via Path Traversal",
    "id" : "2508419",
    "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2508419"
  },
  "cvss3" : {
    "cvss3_base_score" : "8.6",
    "cvss3_scoring_vector" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
    "status" : "verified"
  },
  "cwe" : "CWE-22",
  "details" : [ "An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers  to create root-owned files outside the database and inject lines into the record.\nThis issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.", "A flaw was found in open-iscsi. This vulnerability, known as Path Traversal, allows remote Man-in-the-Middle (MITM) attackers to manipulate file paths. By doing so, attackers can create files with root privileges outside the intended database and inject malicious content into system records. This could lead to unauthorized system modification or privilege escalation." ],
  "statement" : "This is an Important vulnerability in the open-iscsi `iscsi-initiator-utils` package, enabling remote Man-in-the-Middle (MITM) attackers to achieve privilege escalation. The path traversal flaw allows creating root-owned files and injecting malicious data into system records, posing a significant risk of unauthorized system modification without requiring user interaction or prior authentication.",
  "affected_release" : [ {
    "product_name" : "Red Hat Enterprise Linux 10",
    "release_date" : "2026-08-11T00:00:00Z",
    "advisory" : "RHSA-2026:53845",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10.2",
    "package" : "iscsi-initiator-utils-0:6.2.1.11-1.git4b3e853.el10_2.2"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "release_date" : "2026-08-11T00:00:00Z",
    "advisory" : "RHSA-2026:53844",
    "cpe" : "cpe:/a:redhat:enterprise_linux:9",
    "package" : "iscsi-initiator-utils-0:6.2.1.11-1.git4b3e853.el9_8.2"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "release_date" : "2026-08-11T00:00:00Z",
    "advisory" : "RHSA-2026:53844",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9",
    "package" : "iscsi-initiator-utils-0:6.2.1.11-1.git4b3e853.el9_8.2"
  } ],
  "references" : [ "https://www.cve.org/CVERecord?id=CVE-2026-44943\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-44943\nhttps://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-44943\nhttps://github.com/open-iscsi/open-iscsi/commit/668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e" ],
  "name" : "CVE-2026-44943",
  "mitigation" : {
    "value" : "To mitigate this issue, restrict network access to iSCSI initiator systems to only trusted networks and hosts. If iSCSI is not actively used, consider disabling the `iscsid` service to prevent potential exploitation.\nTo disable the `iscsid` service:\n`systemctl stop iscsid`\n`systemctl disable iscsid`\n*Note that disabling the iSCSI service will prevent the system from connecting to iSCSI targets and may impact functionality.",
    "lang" : "en:us"
  },
  "csaw" : false
}