Description
A flaw was found in cockpit-files. This vulnerability allows a local attacker to exploit a timing issue, known as a symlink race condition, during privileged file operations such as changing file ownership or permissions. By manipulating directory entries and winning this race, the attacker can redirect these operations to unintended files. This could lead to unauthorized changes in file ownership and permissions on arbitrary files, potentially compromising system integrity and availability by altering system or application states or rendering services unusable.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | — | — |
| Red Hat | Red Hat Enterprise Linux 9 | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | cockpit-files | 45-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | cockpit-files | No fix yet | — |
| Ubuntu 26.04 LTS | cockpit-files | No fix yet | — |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | cockpit-files | 36.1-1.el10_2 | ALSA-2026:95570 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | cockpit-files | 36.1-1.el10_2 | RLSA-2026:98566, RLSA-2026:95570 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | cockpit-files | 36.1-1.el10_2 | ELSA-2026-95570 |
Advisories 5
- RLSA-2026:98566 Moderate: cockpit-files security update Rocky Linux Security Advisories · Nov 13, 2026
- WID-SEC-2026-4376 Red Hat Enterprise Linux (cockpit-files): Mehrere Schwachstellen ermöglichen Manipulation von Dateien BSI CERT-Bund (WID) · Nov 11, 2026
- RLSA-2026:95570 Moderate: cockpit-files security update Rocky Linux Security Advisories · Nov 6, 2026
- ALSA-2026:95570 Moderate: cockpit-files security update AlmaLinux Security Advisories · Nov 6, 2026
- ELSA-2026-95570 Moderate: cockpit-files security update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Nov 5, 2026
References
- RHSA-2026:95570 vendor-advisory
- RHSA-2026:98566 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2026-91203 vdb-entry
- RHBZ#2465632 issue-tracking