CVE-2026-109411

Name of the Vulnerable Software and Affected Versions Samba (affected versions not specified)

Description An access control bypass exists in the openat() function of the experimental vfs ceph rgw module. An authenticated user can read or overwrite restricted files on shares using this module. The issue occurs when a client requests an existing file with mismatched character casing; the module fails to perform a case-insensitive lookup correctly, leading the server to treat the request as the creation of a new file. Consequently, the server skips standard permission checks, enabling the access or modification of sensitive data owned by other users.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict the use of the experimental vfs ceph rgw module to minimize the risk of exploitation.