Vulnerability · Published May 27, 2026 · Assigned by GitHub_M
CVE-2026-44711pam_usb: Symlink attacks on pad directory and pad files enable authentication bypass and root file corruption
High 7.9
In plain English
A high-severity improper authentication in pam_usb from mcdope. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).
Severity (CVSS 3.1)7.9High
Exploit odds (30 days)0.2%top 85.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, symlink attacks on pad directory and pad files enable authentication bypass and root file corruption. This vulnerability is fixed in 0.8.7.
Affected products (as reported)
Weakness: CWE-59, CWE-287 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H