This vulnerability in cockpit-files involves a symlink race condition during privileged file operations such as changing file ownership or permissions. A local attacker can manipulate directory entries and win a timing race to redirect these operations to unintended files, allowing unauthorized modification of file ownership and permissions. This can compromise system integrity and availability by altering system or application states or rendering services unusable. Exploitation requires a privileged Cockpit user to perform file operations within a directory writable by the attacker, limiting the practical impact. The CVSS v3.1 score is 6.0 (Medium) with vector AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H. Red Hat is the authoritative source and provides detailed advisory information.

The vulnerability allows unauthorized changes to file ownership and permissions on arbitrary files, which can compromise system integrity and availability. This could lead to altered system or application states or cause services to become unusable. However, exploitation requires local access, a privileged Cockpit user performing file operations, and winning a timing race, which limits the scope and practical impact.

Red Hat has published an advisory detailing the vulnerability and its impact. No explicit patch or fix release information is provided in the advisory content, so patch status is not yet confirmed — check the Red Hat advisory for current remediation guidance. Exploitation requires specific conditions including privileged Cockpit user actions in attacker-writable directories, so limiting such conditions can reduce risk. Monitor Red Hat resources for updates and apply any forthcoming patches promptly.