CVE-2026-57855: Cockpit CMS Missing Authorization in Bucket File Storage API
Cockpit CMS contains a missing authorization vulnerability in the Bucket file storage API (/system/buckets/api). The api() method in modules/System/Controller/Buckets.php executes bucket commands (ls, upload, removefiles, rename, createfolder) without performing any ACL or role check. Any authenticated user, regardless of role, can perform all bucket operations on any named bucket, including buckets intended for admin use only.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-57855?
CVE-2026-57855 has a high severity rating of 8.8.
How do I fix CVE-2026-57855?
To fix CVE-2026-57855, implement proper access control checks in the Bucket file storage API.
What are the potential impacts of CVE-2026-57855?
CVE-2026-57855 could allow unauthorized users to execute bucket commands, leading to data exposure or loss.
What software is affected by CVE-2026-57855?
CVE-2026-57855 affects Cockpit CMS, specifically the Bucket file storage API.
What vulnerability type is CVE-2026-57855?
CVE-2026-57855 is classified as a missing authorization vulnerability.