pam_usb, which provides hardware authentication for Linux using removable media, contains a vulnerability prior to version 0.8.7. The flaw involves symlink attacks on pad directory and pad files that can lead to authentication bypass and root file corruption. This represents a significant security risk as it can compromise the authentication mechanism and potentially allow unauthorized access with elevated privileges. The vulnerability has been addressed in version 0.8.7.