CVE-2026-1933

Name of the Vulnerable Software and Affected Versions Samba (affected versions not specified)

Description A flaw exists in the handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing SMB-layer access checks, authenticated users who possess underlying filesystem write permissions can create or delete reparse point metadata through SMB operations, even on read-only exports. This allows for the modification of SMB-visible file behavior, such as converting files into symbolic links or other reparse point types.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.