Red Hat Security Advisory

RHSA-2026:62029

iscsi-initiator-utils security update

Released 2026-09-01 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.9.2) python3-iscsi-initiator-utils-6.2.1.4-3.git2a8f9d8.el9_2.2
Red Hat Enterprise Linux BaseOS E4S (v.9.2) iscsi-initiator-utils-6.2.1.4-3.git2a8f9d8.el9_2.2, iscsi-initiator-utils-iscsiuio-6.2.1.4-3.git2a8f9d8.el9_2.2

Fixes 2 records

TI-2026-32810 CVE-2026-44944 · GHSA-jm64-8832-wmmq

iscsiuio control-socket authentication bypass in open-iscsi

LOW 37

An Incorrect Authorization vulnerability in open-iscsi allows unprivilidged local users to use the isscsiuio control socket.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00093 Published 2026-07-29 Fixed CWE-863

TI-2026-32809 CVE-2026-44943 · GHSA-36cw-9hwh-mr3c

remote limited file-write as root via discovery in open-iscsi

LOW 37

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers to create root-owned files outside the database and inject lines into the record.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00385 Published 2026-07-29 Fixed CWE-22