VDB
RHSA-2026:67516
RHSA-2026:67516
PUBLISHED
CVSS 4.400000095367432 MEDIUM
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
Risk Scores
CVSS 3.1
4.400000095367432
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8d7c2a5e1975a8ddca99c30b4a42eb31f0a7966934dbf06baa65c73299b0892b_arm64 as a component of Multicluster Global Hub 1.4.9 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:19ac9a531acb74dc7744768b332a66fed272f12e85e4f8fd5e79a6bf13c4f492_amd64 as a component of Multicluster Global Hub 1.4.9 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3bfcf80b7b5ec26d710e9d792dde397dbf064dffe76acb67085b4f34ba2ca653_s390x as a component of Multicluster Global Hub 1.4.9 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:1935d279f46862eeb512bb4157e482832359effd86c4b455d9653c4637a5e05c_amd64 as a component of Multicluster Global Hub 1.4.9 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:37e9a14b3cadd534b6673239c77280d8ba1d3406fa6bc67e69689747f2f2145c_amd64 as a component of Multicluster Global Hub 1.4.9 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2be51558f1b6ee44461a1a311ba479de4728da4777fef5950bce7254f24ad960_amd64 as a component of Multicluster Global Hub 1.4.9 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:f7c97db6dea7e57b647c6536d69aa718a94569c3ecb94d6fdc858b47a2eda396_ppc64le as a component of Multicluster Global Hub 1.4.9 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:90239f65825c5d90b6ebcc1cd78baf45614c04c939f127a0bf4d462021fcf379_arm64 as a component of Multicluster Global Hub 1.4.9 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:a3f1a5b471adf61d2c2d2cc057bf12fe573681a1ca7fe82a56fd8a4f127a82f8_arm64 as a component of Multicluster Global Hub 1.4.9 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:15bea39bf05f2c097d77771b481e6ddd20cedb4a4e59e49db004b7582294e61e_ppc64le as a component of Multicluster Global Hub 1.4.9 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3f0beed65a33c11b9c6b05bee51cf82d4ccdb1c58f478fd07043306f1dc7904a_s390x as a component of Multicluster Global Hub 1.4.9 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:05c8f1b6564d0c994a24f41141ecbe80855e1d9a3c345bd0f4c056e6622bd2c8_s390x as a component of Multicluster Global Hub 1.4.9 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:99cddcc48a66352ea886f8f7cb1f9edd52cbab5c0b728e91b92e3b1d4a48455b_s390x as a component of Multicluster Global Hub 1.4.9 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:976e21c6ce39e8902740452881a460ce08e939716053998a95a80c9ccfa7ebb6_ppc64le as a component of Multicluster Global Hub 1.4.9 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:e65239d6de659e16993cb5bc3f3c5f9c4e32e6329632a1203c5b11894781c01c_amd64 as a component of Multicluster Global Hub 1.4.9 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3a4f0a22d43f48ef28fc5bfbf3deaef763a27057d798eecbd684155d1675125c_ppc64le as a component of Multicluster Global Hub 1.4.9 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:fa1eb15dfc5b1a70f4aa2f7a08c638636f65f7f4ca16b5a22d9d5039e4a784db_ppc64le as a component of Multicluster Global Hub 1.4.9 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f8e71dc10b51ac2173107505522bf2943a451ad22a3856d79da00cd3c22c48d8_arm64 as a component of Multicluster Global Hub 1.4.9 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3187a7f244291f05f251a8ae768e1cb426dc77cfdd618590cb794ef2c3fb5097_arm64 as a component of Multicluster Global Hub 1.4.9 | * |
| Red Hat | registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:0c07187e0d8f4c54b3731f146c9dd835f7c506888ca134498e072e19bc94ecc6_amd64 as a component of Multicluster Global Hub 1.4.9 | * |
…and 1 more
Timeline
- Sep 15, 2026 CVE Published
- Sep 23, 2026 CVE Updated
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:67516 advisory
- https://access.redhat.com/security/cve/CVE-2026-32282 advisory
- https://access.redhat.com/security/cve/CVE-2026-33818 advisory
- https://access.redhat.com/security/cve/CVE-2026-34040 advisory
- https://access.redhat.com/security/cve/CVE-2026-41178 advisory
- https://access.redhat.com/security/cve/CVE-2026-42502 advisory
- https://access.redhat.com/security/cve/CVE-2026-46604 advisory
- https://access.redhat.com/security/cve/CVE-2026-48586 advisory
- https://access.redhat.com/security/cve/CVE-2026-50151 advisory
- https://access.redhat.com/security/cve/CVE-2026-56852 advisory
- https://access.redhat.com/security/cve/CVE-2026-56853 advisory
- https://access.redhat.com/security/cve/CVE-2026-56858 advisory
- https://access.redhat.com/security/cve/CVE-2026-56859 advisory
- https://access.redhat.com/security/cve/CVE-2026-56860 advisory
- https://access.redhat.com/security/cve/CVE-2026-56862 advisory
- https://access.redhat.com/security/cve/CVE-2026-66792 advisory
- https://access.redhat.com/security/cve/CVE-2026-71235 advisory
- https://access.redhat.com/security/cve/CVE-2026-71576 advisory
- https://access.redhat.com/security/cve/CVE-2026-71577 advisory
- https://access.redhat.com/security/cve/CVE-2026-73500 advisory
…and 123 more