Red Hat Security AdvisoryRHSA-2026:60428
iscsi-initiator-utils security, bug fix, and enhancement update
Released 2026-08-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v.9.6) python3-iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9_6.3
- Red Hat Enterprise Linux BaseOS EUS (v.9.6) iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9_6.3, iscsi-initiator-utils-iscsiuio-6.2.1.9-1.gita65a472.el9_6.3
Fixes 2 records
Priority LOW 37
An Incorrect Authorization vulnerability in open-iscsi allows unprivilidged local users to use the isscsiuio control socket.
CVSS 4.0HIGH 8.5· Local · Low privileges · No interaction · EPSS 0.00093 · Published 2026-07-29 · Fixed CWE-863
Priority LOW 37
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers to create root-owned files outside the database and inject lines into the record.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00385 · Published 2026-07-29 · Fixed CWE-22
