Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 9 enterprise_linux:9::appstream | cockpit-files | 0:36.1-1.el9_8 |
Vulnerabilities 2
-
Medium 6.1
Cockpit-files: cockpit-files: arbitrary file ownership change via symlink following in privileged paste
A flaw was found in cockpit-files. A low-privileged local user can exploit this vulnerability by crafting a directory containing a symbolic link (symlink) and then using the privileged "Paste as owner" function. This allows for arbitrary file ownership change…
-
Medium 6.0
Cockpit-files: cockpit-files: local attacker can hijack file ownership via symlink race
A flaw was found in cockpit-files. A local unprivileged attacker can exploit a race condition during directory creation with owner assignment. By controlling a writable parent directory, the attacker can replace a newly created directory with a symbolic link …
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2465834
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2466442
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_84595.json
-
report
https://access.redhat.com/security/cve/CVE-2026-91202
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-91202
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-91202
-
report
https://access.redhat.com/security/cve/CVE-2026-91205
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-91205
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-91205