CVE-2026-44943 remote limited file-write as root via discovery in open-iscsi
Remote attackers can perform path traversal to create root-owned files and inject data, potentially leading to privilege escalation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-44943?
CVE-2026-44943 is a medium-severity path traversal vulnerability in open-iscsi, published on 29 Jul 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers to create root-owned files outside the database and inject lines into the record.
This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.
Weakness: CWE-22
Which versions are affected by CVE-2026-44943?
Linux distribution packages (8)
iscsi-initiator-utils Red Hat:enterprise_linux_eus:10.0 | All versions | 0:6.2.1.9-22.gita65a472.el10_0.1 |
iscsi-initiator-utils-debuginfo Red Hat:enterprise_linux_eus:10.0 | All versions | 0:6.2.1.9-22.gita65a472.el10_0.1 |
iscsi-initiator-utils-debugsource Red Hat:enterprise_linux_eus:10.0 | All versions | 0:6.2.1.9-22.gita65a472.el10_0.1 |
iscsi-initiator-utils-iscsiuio Red Hat:enterprise_linux_eus:10.0 | All versions | 0:6.2.1.9-22.gita65a472.el10_0.1 |
iscsi-initiator-utils-iscsiuio-debuginfo Red Hat:enterprise_linux_eus:10.0 | All versions | 0:6.2.1.9-22.gita65a472.el10_0.1 |
python3-iscsi-initiator-utils Red Hat:enterprise_linux_eus:10.0 | All versions | 0:6.2.1.9-22.gita65a472.el10_0.1 |
python3-iscsi-initiator-utils-debuginfo Red Hat:enterprise_linux_eus:10.0 | All versions | 0:6.2.1.9-22.gita65a472.el10_0.1 |
open-iscsi openSUSE:Tumbleweed | All versions | 2.1.12-112.1 |
How do I fix CVE-2026-44943?
Apply the vendor's patch.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2026-44943 being exploited?
There is no known exploitation of CVE-2026-44943 in the wild and no public exploit code.
Sources
Also known as AZL-94428, DEBIAN-CVE-2026-44943, GHSA-36cw-9hwh-mr3c, RHSA-2026:61679, UBUNTU-CVE-2026-44943, openSUSE-SU-2026:11317-1.