CVE-2020-24717: Openzfs

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

OpenZFS before 2.0.0-rc1, when used on FreeBSD, misinterprets group permissions as user permissions, as demonstrated by mode 0770 being equivalent to mode 0777.

Affected products

• Openzfs Openzfs: up to and including 0.8.4

Published 2020-08-27. Last modified 2026-06-17.