CVE-2026-91205
Last modified
CVE-2026-91205 is a medium-severity vulnerability rated 6/10 on the CVSS scale. A flaw was found in cockpit-files. A local unprivileged attacker can exploit a race condition during directory creation with owner assignment. EPSS estimates a 0.11% chance of exploitation in the next 30 days.
Description
A flaw was found in cockpit-files. A local unprivileged attacker can exploit a race condition during directory creation with owner assignment. By controlling a writable parent directory, the attacker can replace a newly created directory with a symbolic link (symlink) before the ownership change operation (chown) is applied. This allows the attacker to redirect the ownership change to an arbitrary file, potentially leading to information disclosure or unauthorized modification of sensitive files.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | All versions |
| Red Hat | Red Hat Enterprise Linux 9 | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-91205?
How severe is CVE-2026-91205?
How do I fix CVE-2026-91205?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-9120Use after free in WebRTC in Google Chrome prior to 148.0.777…8.8
- CVE-2026-91200DevSpace through 6.3.21 fails to reject parent-directory seg…8.8
- CVE-2026-91201DocsGPT through 0.20.0 posts OAuth connector session tokens …5.4
- CVE-2026-91202A flaw was found in cockpit-files. A low-privileged local us…6.1
- CVE-2026-91203A flaw was found in cockpit-files. This vulnerability allows…6
- CVE-2026-91204Improper Neutralization of Input During Web Page Generation …6.1
- CVE-2026-91206Improper Neutralization of Input During Web Page Generation …6.1
- CVE-2026-91208Vulnerability in the Oracle Solaris product of Oracle System…5.1
- CVE-2026-91209Vulnerability in the Oracle Solaris product of Oracle System…4.2
- CVE-2026-9121Out of bounds read in GPU in Google Chrome on prior to 148.0…8.8
- CVE-2026-91210Vulnerability in the Oracle WebCenter Content product of Ora…6.5
- CVE-2026-91211Vulnerability in the Oracle Identity Manager Connector produ…8.7
Are you affected by CVE-2026-91205?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST