CVE-2026-44711 Details

A vulnerability in pam_usb prior to version 0.8.7 allows for authentication bypass and corruption of root-owned files. This issue arises from symlink attacks on the pad directory and pad files, exploiting weaknesses in how the application handles filesystem paths. The vulnerability is fixed in version 0.8.7.

Users can upgrade to pam_usb version 0.8.7, which addresses the vulnerability by changing the pad directory check to use 'lstat()' instead of 'stat()', preventing symlink exploitation. The method of opening pad files has also been revised to reject pre-placed symlinks, and the comparison of pad files now includes checks to avoid reading uninitialized memory.