Red Hat Security AdvisoryRHSA-2026:53844
iscsi-initiator-utils security, bug fix, and enhancement update
Released 2026-08-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) python3-iscsi-initiator-utils-6.2.1.11-1.git4b3e853.el9_8.2
- Red Hat Enterprise Linux BaseOS (v. 9) iscsi-initiator-utils-6.2.1.11-1.git4b3e853.el9_8.2, iscsi-initiator-utils-iscsiuio-6.2.1.11-1.git4b3e853.el9_8.2
Fixes 2 records
Priority LOW 37
An Incorrect Authorization vulnerability in open-iscsi allows unprivilidged local users to use the isscsiuio control socket.
CVSS 4.0HIGH 8.5· Local · Low privileges · No interaction · EPSS 0.00093 · Published 2026-07-29 · Fixed CWE-863
Priority LOW 37
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers to create root-owned files outside the database and inject lines into the record.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00385 · Published 2026-07-29 · Fixed CWE-22
