CVE-2026-2340

CVE-2026-2340 · Samba: vfs_worm does not block directory modification

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

A flaw was found in Samba’s vfs_worm module. The module is intended to provide write-once, read-many (WORM) protections by preventing modification of files after a configurable grace period. Due to insufficient validation during rename operations, an authenticated user with write access to a share could overwrite a protected file by renaming a newly created file over the existing WORM-protected file.

CVSS 6.5 · Medium · EPSS 0.9% · Fix available

Published

2026-05-27T12:09:32.601Z

Updated

2026-10-15T16:58:45.339Z

Stack: system

Check your server →