Red Hat Security Advisory

RHSA-2026:61679

iscsi-initiator-utils security, bug fix, and enhancement update

Released 2026-08-31 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v. 10.0) python3-iscsi-initiator-utils-6.2.1.9-22.gita65a472.el10_0.1
Red Hat Enterprise Linux BaseOS EUS (v. 10.0) iscsi-initiator-utils-6.2.1.9-22.gita65a472.el10_0.1, iscsi-initiator-utils-iscsiuio-6.2.1.9-22.gita65a472.el10_0.1

Fixes 1 record

TI-2026-32809 CVE-2026-44943 · GHSA-36cw-9hwh-mr3c

remote limited file-write as root via discovery in open-iscsi

LOW 37

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers to create root-owned files outside the database and inject lines into the record.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00385 Published 2026-07-29 Fixed CWE-22