CVE-2026-1933

EUVD-2026-32275

27.05.2026, 14:16

A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing SMB-layer access checks, authenticated users with underlying filesystem write permissions may create or delete reparse point metadata through SMB operations even on read-only exports. This could allow modification of SMB-visible file behavior, including converting files into symbolic links or other reparse point types.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.1 HIGH	NETWORK	LOW	LOW	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 54%

Affected Products (NVD)

Vendor	Product	Version
redhat	openshift_container_platform	4.0
samba	samba	4.1.0 ≤ 𝑥 < 4.2.2
redhat	enterprise_linux	7.0
redhat	enterprise_linux	8.0
redhat	enterprise_linux	9.0
redhat	enterprise_linux	10.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

samba

bookworm	2:4.17.12+dfsg-0+deb12u3 fixed
bookworm (security)	2:4.17.12+dfsg-0+deb12u4 fixed
bullseye	2:4.13.13+dfsg-1~deb11u6 fixed
bullseye (security)	2:4.13.13+dfsg-1~deb11u7 fixed
forky	2:4.24.3+dfsg-1 fixed
sid	2:4.24.4+dfsg-1 fixed
trixie	vulnerable
trixie (security)	2:4.22.8+dfsg-0+deb13u2 fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

ctdb

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

ldb-tools

RHEL 9

0:4.23.5-10.el9_8

fixed

libldb

RHEL 9

0:4.23.5-10.el9_8

fixed

libldb-devel

RHEL 9

0:4.23.5-10.el9_8

fixed

libnetapi

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

libnetapi-devel

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

libsmbclient

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

libsmbclient-devel

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

libwbclient

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

libwbclient-devel

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

python3-ldb

RHEL 9

0:4.23.5-10.el9_8

fixed

python3-samba

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

python3-samba-dc

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

python3-samba-devel

RHEL 8

0:4.19.4-16.el8_10

fixed

python3-samba-test

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-client

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-client-libs

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-common

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-common-libs

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-common-tools

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-dc-libs

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-dcerpc

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-devel

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-gpupdate

RHEL 9

0:4.23.5-10.el9_8

fixed

samba-krb5-printing

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-ldb-ldap-modules

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-libs

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-pidl

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-test

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-test-libs

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-tools

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-usershares

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-vfs-iouring

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-winbind

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-winbind-clients

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-winbind-krb5-locator

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-winbind-modules

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed

samba-winexe

RHEL 8	0:4.19.4-16.el8_10 fixed
RHEL 8.6 AUS	0:4.15.5-16.el8_6.1 fixed
RHEL 8.8 E4S	0:4.17.5-7.el8_8.1 fixed
RHEL 8.8 TUS	0:4.17.5-7.el8_8.1 fixed
RHEL 9	0:4.23.5-10.el9_8 fixed