🟠 High | Source: Microsoft Security Response Center
CVE-2026-44943 is a vulnerability in open-iscsi, the Linux iSCSI initiator, that allows a remote attacker to perform a limited file-write operation as root via the discovery process. This affects Azure workloads running Linux virtual machines or containers that use open-iscsi for storage connectivity. The ability to write files as root, even in a limited capacity, could be leveraged to escalate privileges, persist malware, or disrupt storage-attached workloads.
Security Architect’s Take: Audit Azure Linux VM and AKS node configurations to identify any use of open-iscsi, then prioritise patching or restrict iSCSI discovery traffic at the network layer using NSGs or Azure Firewall until a fix is applied. Consider whether iSCSI discovery ports should be exposed at all in your environment.
Original advisory: CVE-2026-44943 remote limited file-write as root via discovery in open-iscsi