ALSA-2026:86970: Moderate: cockpit-machines security update
Cockpit component for managing libvirt virtual machines.
Security Fix(es):
cockpit-machines: cockpit-machines: Sensitive data exposure via command-line arguments (CVE-2026-92768) cockpit-machines: cockpit-machines: Sensitive Data Exposure of guest credentials via JSON argument in process list (CVE-2026-92747) cockpit-machines: cockpit-machines: Information Disclosure of RHSM Offline Token via Process Arguments (CVE-2026-92745)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
almalinux/cockpit-machinesto a version that resolves this vulnerability.Fixed in 348.1-1.el9_8
Event History
Child vulnerabilities
Contains the following vulnerabilities.