osv:ALSA-2026:84595: cockpit-files (exact versions not specified)

Moderate: cockpit-files security update. Fixed version: 36.1-1.el9_8.

Affected technology

cockpit-files · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

Local attacker can hijack file ownership via symlink race (CVE-2026-91205) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Published 22-Oct-2026 20:43 UTC

Product: cockpit-files
KEV: no

Provenance

OSV.dev · Source record · observed 2026-10-22 12:21:37.944032+00:00 UTC

Stable permalink: https://cybercodered.org/item/adv-osv-alsa-2026-84595.html