OpenZFS vulnerabilities
We track 2 vulnerabilities in OpenZFS products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 26, 2026.
2vulnerabilities
0critical
2high
0exploited
7.4average CVSS score
Latest OpenZFS vulnerabilities
- 7.3 High severity
OpenZFS: Incorrect Authorization
On Linux, several OpenZFS ioctl authorization checks accept a capability held only within a user-created, unprivileged namespace as equivalent to real host privilege, allowing an unprivileged local user to perform operations that should require root. Affected
- 7.5 High severity
openzfs: Authorization Bypass Through User-Controlled Key
OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficient copying of file data, can replace file contents with zero-valued bytes and thus potentially disable security mechanisms. NOTE: this issue