This vulnerability involves incorrect execution-assigned permissions in firewalld on Red Hat Enterprise Linux 10. Specifically, two runtime D-Bus setters, setZoneSettings2 and setPolicySettings, are mis-authorized, enabling a local unprivileged user to alter the runtime firewall state without proper authentication. This flaw could lead to unauthorized modifications of network security settings, potentially impacting system integrity. The CVSS 3.1 vector indicates the attack requires local access with low complexity, no user interaction, and results in high impact on integrity but no confidentiality or availability impact.

An unprivileged local user can modify the runtime firewall configuration without proper authentication, leading to unauthorized changes in network security policies. This compromises the integrity of the firewall settings, potentially allowing malicious network traffic or bypassing security controls. There is no direct impact on confidentiality or availability according to the CVSS vector.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-4948 for current remediation guidance. Until an official fix is available, restrict local user access and monitor for unauthorized changes to firewall configurations. Follow vendor guidance closely once updates are released.