CVE-2026-64666 | mcdope pam_usb up to 0.9.2 Environment Variable src/local.c pusb_local_login XRDP_SESSION privileges management

A vulnerability was found in mcdope pam_usb up to 0.9.2. It has been classified as critical. Affected by this issue is the function pusb_local_login of the file src/local.c of the component Environment Variable Handler. This manipulation of the argument XRDP_SESSION causes improper privilege management.

This vulnerability is handled as CVE-2026-64666. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More