RHSA-2026:99602: Important: cockpit security update
Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more.Security Fix(es): cockpit: Cockpit: Local privilege escalation via insecure symlink handling in public key addition helper (CVE-2026-91151) cockpit: cockpit: Denial of Service via unbounded fragmented WebSocket messages (CVE-2026-91150) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/cockpitto a version that resolves this vulnerability.Fixed in 366.1.1-1.el9_9 - Upgrade
Upgrade
redhat/cockpit-bridgeto a version that resolves this vulnerability.Fixed in 366.1.1-1.el9_9 - Upgrade
Upgrade
redhat/cockpit-debuginfoto a version that resolves this vulnerability.Fixed in 366.1.1-1.el9_9 - Upgrade
Upgrade
redhat/cockpit-debugsourceto a version that resolves this vulnerability.Fixed in 366.1.1-1.el9_9 - Upgrade
Upgrade
redhat/cockpit-docto a version that resolves this vulnerability.Fixed in 366.1.1-1.el9_9 - Upgrade
Upgrade
redhat/cockpit-packagekitto a version that resolves this vulnerability.Fixed in 366.1.1-1.el9_9 - Upgrade
Upgrade
redhat/cockpit-storagedto a version that resolves this vulnerability.Fixed in 366.1.1-1.el9_9 - Upgrade
Upgrade
redhat/cockpit-systemto a version that resolves this vulnerability.Fixed in 366.1.1-1.el9_9 - Upgrade
Upgrade
redhat/cockpit-wsto a version that resolves this vulnerability.Fixed in 366.1.1-1.el9_9 - Upgrade
Upgrade
redhat/cockpit-ws-selinuxto a version that resolves this vulnerability.Fixed in 366.1.1-1.el9_9 - Upgrade
Upgrade
redhat/cockpitto a version that resolves this vulnerability.Fixed in 366.1.1-1.el9_9.aa - Upgrade
Upgrade
redhat/cockpit-debuginfoto a version that resolves this vulnerability.Fixed in 366.1.1-1.el9_9.aa - Upgrade
Upgrade
redhat/cockpit-debugsourceto a version that resolves this vulnerability.Fixed in 366.1.1-1.el9_9.aa - Upgrade
Upgrade
redhat/cockpit-wsto a version that resolves this vulnerability.Fixed in 366.1.1-1.el9_9.aa - Upgrade
Upgrade
redhat/cockpit-ws-selinuxto a version that resolves this vulnerability.Fixed in 366.1.1-1.el9_9.aa
Event History
Frequently Asked Questions
What attacker access is required for the privilege-escalation issue?
The issue is described as a local privilege escalation in Cockpit's public key addition helper. The advisory does not state which local account privileges or authentication conditions are required.
What systems are exposed to the denial-of-service issue?
The issue involves unbounded fragmented WebSocket messages, so exposure is tied to Cockpit's WebSocket-facing functionality. The advisory does not specify whether the affected endpoint is enabled or reachable in a default configuration.
Which Cockpit packages are included in this update?
The listed packages are cockpit, cockpit-debuginfo, cockpit-debugsource, cockpit-ws, cockpit-ws-selinux, cockpit-bridge, cockpit-doc, and cockpit-packagekit.