An Incorrect Authorization vulnerability in open-iscsi allows unprivilidged local users to use the isscsiuio control socket.
This issue affects open-iscsi: from ? through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.
CVSS Details
- CVSS 4.0 Base Score: 8.5 (HIGH)
- CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-iscsi-initiator-utilsUpgrade iscsi-initiator-utils-iscsiuioUpgrade iscsi-initiator-utils | Oct 11, 2026 | Aug 11, 2026 |
| Amazon Linux Ami 2 | — | Upgrade iscsi-initiator-utils-debuginfoUpgrade iscsi-initiator-utils-iscsiuioUpgrade iscsi-initiator-utils-develUpgrade iscsi-initiator-utils | Oct 19, 2026 | Oct 19, 2026 |
| Amazon_linux_2023 | — | Upgrade python3-iscsi-initiator-utils-debuginfoUpgrade iscsi-initiator-utils-debugsourceUpgrade iscsi-initiator-utils-debuginfoUpgrade iscsi-initiator-utils-iscsiuioUpgrade iscsi-initiator-utils-develUpgrade iscsi-initiator-utilsUpgrade python3-iscsi-initiator-utilsUpgrade iscsi-initiator-utils-iscsiuio-debuginfo | Aug 18, 2026 | Jul 29, 2026 |
| Debian | — | Upgrade open-iscsi | Oct 5, 2026 | Jul 29, 2026 |
| Oracle_linux | — | Upgrade iscsi-initiator-utilsUpgrade iscsi-initiator-utils-iscsiuioUpgrade python3-iscsi-initiator-utils | Oct 22, 2026 | Jul 29, 2026 |
| Redhat_linux | — | Upgrade iscsi-initiator-utilsUpgrade iscsi-initiator-utils-debugsourceUpgrade python3-iscsi-initiator-utils-debuginfoUpgrade iscsi-initiator-utils-debuginfoUpgrade iscsi-initiator-utils-iscsiuioUpgrade python3-iscsi-initiator-utilsUpgrade iscsi-initiator-utils-iscsiuio-debuginfo | Jul 31, 2026 | Jul 29, 2026 |
| Rocky_linux | — | Upgrade iscsi-initiator-utils-iscsiuioUpgrade iscsi-initiator-utilsUpgrade python3-iscsi-initiator-utils-debuginfoUpgrade iscsi-initiator-utils-iscsiuio-debuginfoUpgrade iscsi-initiator-utils-debuginfoUpgrade python3-iscsi-initiator-utilsUpgrade iscsi-initiator-utils-debugsource | Aug 13, 2026 | Aug 12, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub