CVE-2026-44711: Mcdope Pam USB

High severity, CVSS 7.9. EPSS: 0.2% chance of exploitation in the next 30 days.

pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, symlink attacks on pad directory and pad files enable authentication bypass and root file corruption. This vulnerability is fixed in 0.8.7.

Affected products

• Mcdope Pam USB: before 0.8.7 (fixed in 0.8.7)

Published 2026-05-27. Last modified 2026-06-17.