CVE-2026-44051

EUVD-2026-31228
An improper link resolution vulnerability in Netatalk 3.0.2 through 4.4.2 allows a remote authenticated attacker to read arbitrary files or overwrite arbitrary files via attacker-controlled symlink creation.
Link Following
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
securinCNA
8.1 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 39.38%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
netatalknetatalk
3.0.2 ≤
𝑥
≤ 4.4.2
CNA
Debian logo
Debian Releases
Debian Product
Codename
netatalk
bullseye
vulnerable
bullseye (security)
vulnerable
forky
4.5.1~ds-1
fixed
sid
4.5.1~ds-1
fixed
trixie
4.2.3~ds-1+deb13u2
fixed
trixie (security)
4.2.3~ds-1+deb13u2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
netatalk
bionic
Fixed 2.2.6-1ubuntu0.18.04.2+esm3
released
focal
Fixed 3.1.12~ds-4ubuntu0.20.04.4+esm1
released
jammy
Fixed 3.1.12~ds-9ubuntu0.22.04.4+esm1
released
noble
Fixed 3.1.18~ds-1ubuntu0.1~esm2
released
questing
ignored
resolute
Fixed 4.2.3~ds-2.1ubuntu0.1
released
trusty
Fixed 2.2.2-1ubuntu2.2+esm3
released
Common Weakness Enumeration
References
https://netatalk.io/security/CVE-2026-44051