CVE Catalog
CVE-2026-44054
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.28%
20th percentile - higher than 20% of all known CVEs
Summary
Netatalk 2.0.0 through 4.4.2 generates AFP session tokens derived from predictable process IDs, which allows a remote authenticated attacker to cause a denial of service by exploiting the reconnect mechanism.
Risk Assessment
An attacker could disrupt the AFP service, causing unavailability of shared resources.
Recommendation
Update Netatalk to version 4.4.3 or later, which includes a fix for session token generation.
Original NVD description (English source)
Netatalk 2.0.0 through 4.4.2 generates AFP session tokens derived from predictable process IDs, which allows a remote authenticated attacker to cause a denial of service by exploiting the reconnect mechanism.