RHSA-2026:99600: Important: cockpit security update
Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more.Security Fix(es): cockpit: Cockpit: Local privilege escalation via insecure symlink handling in public key addition helper (CVE-2026-91151) cockpit: cockpit: Denial of Service via unbounded fragmented WebSocket messages (CVE-2026-91150) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/cockpitto a version that resolves this vulnerability.Fixed in 366.1.1-1.el10_3 - Upgrade
Upgrade
redhat/cockpit-bridgeto a version that resolves this vulnerability.Fixed in 366.1.1-1.el10_3 - Upgrade
Upgrade
redhat/cockpit-debuginfoto a version that resolves this vulnerability.Fixed in 366.1.1-1.el10_3 - Upgrade
Upgrade
redhat/cockpit-debugsourceto a version that resolves this vulnerability.Fixed in 366.1.1-1.el10_3 - Upgrade
Upgrade
redhat/cockpit-docto a version that resolves this vulnerability.Fixed in 366.1.1-1.el10_3 - Upgrade
Upgrade
redhat/cockpit-packagekitto a version that resolves this vulnerability.Fixed in 366.1.1-1.el10_3 - Upgrade
Upgrade
redhat/cockpit-storagedto a version that resolves this vulnerability.Fixed in 366.1.1-1.el10_3 - Upgrade
Upgrade
redhat/cockpit-systemto a version that resolves this vulnerability.Fixed in 366.1.1-1.el10_3 - Upgrade
Upgrade
redhat/cockpit-wsto a version that resolves this vulnerability.Fixed in 366.1.1-1.el10_3 - Upgrade
Upgrade
redhat/cockpit-ws-selinuxto a version that resolves this vulnerability.Fixed in 366.1.1-1.el10_3 - Upgrade
Upgrade
redhat/cockpitto a version that resolves this vulnerability.Fixed in 366.1.1-1.el10_3.aa - Upgrade
Upgrade
redhat/cockpit-debuginfoto a version that resolves this vulnerability.Fixed in 366.1.1-1.el10_3.aa - Upgrade
Upgrade
redhat/cockpit-debugsourceto a version that resolves this vulnerability.Fixed in 366.1.1-1.el10_3.aa - Upgrade
Upgrade
redhat/cockpit-wsto a version that resolves this vulnerability.Fixed in 366.1.1-1.el10_3.aa - Upgrade
Upgrade
redhat/cockpit-ws-selinuxto a version that resolves this vulnerability.Fixed in 366.1.1-1.el10_3.aa
Event History
Frequently Asked Questions
What level of access does an attacker need for the privilege-escalation issue?
The privilege-escalation issue is identified as local. It involves insecure symlink handling in the public-key addition helper.
Which Cockpit components are included in this update?
The update covers cockpit, cockpit-ws, cockpit-ws-selinux, cockpit-bridge, cockpit-packagekit, cockpit-doc, cockpit-debuginfo, and cockpit-debugsource.
What condition is associated with the denial-of-service issue?
The denial of service is associated with unbounded fragmented WebSocket messages.