The flaw is an incorrect authorization check (CWE-1220, CWE-863) that allows any local user to access the isscsiuio control socket. By connecting to this socket, an attacker can issue commands that normally require elevated privileges, effectively bypassing the usual authentication mechanism. This can lead to unauthorized control over iSCSI target or initiator configurations, compromising the integrity and availability of storage services.

The vulnerability impacts the open‑iscsi package. All releases up to and including the commit 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e are affected. The specific release series preceding that commit is not enumerated. Any system that installs open‑iscsi before the fix is susceptible.

The CVSS score of 8.5 reflects a high severity local privilege escalation. The EPSS score of less than 1% indicates a low current exploitation probability, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is local; an adversary needs physical or user‑level access to the host to connect to the control socket. Once connected, the lack of authentication enables arbitrary command execution through the socket, making the exploit straightforward for an authenticated local user.