VDB
RHSA-2026:86971
RHSA-2026:86971
PUBLISHED
CVSS 5.5 MEDIUM
A flaw was found in cockpit-machines. This vulnerability allows a local attacker with the ability to inspect process metadata to disclose a sensitive Red Hat Subscription Management (RHSM) offline token. The token is exposed when it is passed as a command-line argument to a helper script during the token validation process. Successful exploitation could lead to the compromise of confidentiality, as the exposed token can be used to request access tokens.
Risk Scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | cockpit-machines-0:348.1-1.el10_2.src as a component of Red Hat Enterprise Linux AppStream (v. 10) | 0:348.1-1.el10_2 |
| Red Hat | cockpit-machines-0:348.1-1.el10_2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10) | 0:348.1-1.el10_2 |
Timeline
- Oct 21, 2026 CVE Published
- Oct 21, 2026 CVE Updated
- Oct 21, 2026 Distribution Patch
- Oct 21, 2026 Distribution Patch
- Oct 21, 2026 Security Advisory
- Oct 21, 2026 Security Advisory
- Oct 21, 2026 Security Advisory
- Oct 21, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:86971 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2469258 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2469260 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2476266 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_86971.json advisory
- https://access.redhat.com/security/cve/CVE-2026-92745 advisory
- https://www.cve.org/CVERecord?id=CVE-2026-92745 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-92745 advisory
- https://access.redhat.com/security/cve/CVE-2026-92747 advisory
- https://www.cve.org/CVERecord?id=CVE-2026-92747 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-92747 advisory
- https://access.redhat.com/security/cve/CVE-2026-92768 advisory
- https://www.cve.org/CVERecord?id=CVE-2026-92768 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-92768 advisory