The command-line-assistant package, a simple wrapper to interact with Red Hat Advanced Governance (RAG), contains an improper access control vulnerability in its Lightspeed history management component. This vulnerability (CVE-2025-5962) permits local privilege manipulation, potentially allowing a local user to escalate privileges. Red Hat Product Security has rated this issue as moderate severity and released updated packages for Red Hat Enterprise Linux 9.6, 9.8, and related Extended Update Support and Extended Life Cycle versions across multiple architectures. The advisory does not provide a CVSS score but references the CVE page for further details.

The vulnerability allows local users to manipulate privileges due to improper access control in Lightspeed history management within the command-line-assistant package. This could lead to unauthorized privilege escalation on affected systems. The impact is limited to local privilege manipulation and does not indicate remote exploitation or broader system compromise.

Red Hat has released updated command-line-assistant packages addressing this vulnerability for Red Hat Enterprise Linux 9.6, 9.8, and related Extended Update Support and Extended Life Cycle versions. Users should apply these updates after ensuring all previously released errata relevant to their systems are installed. Detailed update instructions are available from Red Hat's official documentation. No other mitigation or workaround is specified.