CVE-2026-49431

CVE-2026-49431 is an access control flaw in the OpenZFS component of FreeBSD (all supported versions). The ZFS_IOC_SET_PROP ioctl, used by zfs-set(8), incorrectly validated the calling user, allowing any unprivileged local user to set the internal ZFS metadata flag $hasrecvd on a dataset, falsely...