RHSA-2026:98458: Moderate: cockpit-files security update

Q: What level of access would an attacker need to exploit these issues?

The ownership-hijacking race is described as exploitable by a local attacker. The other issue occurs during a privileged paste operation, where symlink following can allow arbitrary file ownership changes.

Published Nov 11, 2026

Updated

A filesystem browser for CockpitSecurity Fix(es): cockpit-files: cockpit-files: Arbitrary file ownership change via symlink following in privileged paste (CVE-2026-91202) cockpit-files: cockpit-files: Local attacker can hijack file ownership via symlink race (CVE-2026-91205) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

2 affected componentsFixes available

redhat/cockpit-files<43.1-1.el9_9

43.1-1.el9_9

redhat/cockpit-files<43.1-1.el9_9

43.1-1.el9_9

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade redhat/cockpit-files to a version that resolves this vulnerability.
Fixed in 43.1-1.el9_9

Event History

Nov 11, 2026

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

What level of access would an attacker need to exploit these issues?

The ownership-hijacking race is described as exploitable by a local attacker. The other issue occurs during a privileged paste operation, where symlink following can allow arbitrary file ownership changes.

RHSA-2026:98458: Moderate: cockpit-files security update

Affected Software

Remediation

Event History

Frequently Asked Questions

What level of access would an attacker need to exploit these issues?

Company

Resources

Contact

Frequently Asked Questions

What level of access would an attacker need to exploit these issues?