rpm package
almalinux/cockpit-files
pkg:rpm/almalinux/cockpit-files
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-91205 | Med | 6.0 | < 36.1-1.el9_8 | 36.1-1.el9_8 | Sep 18, 2026 | A flaw was found in cockpit-files. A local unprivileged attacker can exploit a race condition during directory creation with owner assignment. By controlling a writable parent directory, the attacker can replace a newly created directory with a symbolic link (symlink) before the | |
| CVE-2026-91202 | Med | 6.1 | < 36.1-1.el9_8 | 36.1-1.el9_8 | Sep 18, 2026 | A flaw was found in cockpit-files. A low-privileged local user can exploit this vulnerability by crafting a directory containing a symbolic link (symlink) and then using the privileged "Paste as owner" function. This allows for arbitrary file ownership changes outside the intende |
- affected < 36.1-1.el9_8fixed 36.1-1.el9_8
A flaw was found in cockpit-files. A local unprivileged attacker can exploit a race condition during directory creation with owner assignment. By controlling a writable parent directory, the attacker can replace a newly created directory with a symbolic link (symlink) before the
- affected < 36.1-1.el9_8fixed 36.1-1.el9_8
A flaw was found in cockpit-files. A low-privileged local user can exploit this vulnerability by crafting a directory containing a symbolic link (symlink) and then using the privileged "Paste as owner" function. This allows for arbitrary file ownership changes outside the intende