RHSA-2026:97538: Important: cockpit-files security update
Published Nov 10, 2026
·Updated
A filesystem browser for CockpitSecurity Fix(es): lodash: lodash: Arbitrary code execution via untrusted input in template imports (CVE-2026-4800) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Additional Changes:For detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes linked from the References section.
Affected Software
2 affected componentsFixes available
redhat/cockpit-files<43-1.el9
43-1.el9
redhat/cockpit-files<43-1.el9
43-1.el9
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/cockpit-filesto a version that resolves this vulnerability.Fixed in 43-1.el9
Event History
Nov 10, 2026
Advisory Published
via Red Hat·12:00 AM
Data Sourced
via Red Hat·12:00 AM
RemedyDescriptionAffected Software