Red Hat Security Advisory

RHSA-2026:3938

nfs-utils security update

Released 2026-03-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) libnfsidmap-1:2.3.3-68.el8_10, nfs-utils-1:2.3.3-68.el8_10
Red Hat Enterprise Linux CRB (v. 8) libnfsidmap-devel-1:2.3.3-68.el8_10

Fixes 1 record

TI-2025-11726 CVE-2025-12801 · GHSA-q8x7-j9x6-2fpc

Nfs-utils: rpc.mountd in the nfs-utils privilege escalation

LOW 29

A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00514 Published 2026-03-04 Partial fix · 1:2.8.3-0.el10_1.3, 1:2.3.3-68.el8_10 +8 CWE-279