CVE-2026-91205
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
17/100
Published: 2026-09-18
Modified: 2026-11-11
First seen: 2026-11-06
Status: active
Attack Surface
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Local
AC:
High
PR:
Low
UI:
Required
S:
Unchanged
C:
High
I:
High
A:
None
Description
A flaw was found in cockpit-files. A local unprivileged attacker can exploit a race condition during directory creation with owner assignment. By controlling a writable parent directory, the attacker can replace a newly created directory with a symbolic link (symlink) before the ownership change operation (chown) is applied. This allows the attacker to redirect the ownership change to an arbitrary file, potentially leading to information disclosure or unauthorized modification of sensitive files.
Weakness Classification (1)
References & Advisories (6)
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vdb-entry
x_refsource_REDHAT
issue-tracking
x_refsource_REDHAT