CVE-2026-58015 is a vulnerability in GLib affecting Red Hat Enterprise Linux 10. The issue lies in the D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication mechanism, which does not properly validate the cookie_context parameter received from the server. A malicious D-Bus server can exploit this by providing a cookie_context with path traversal sequences, enabling the client to read arbitrary files. This can lead to exfiltration of sensitive data through verification of guessed file contents against a generated hash. The vulnerability is rated medium severity with a CVSS 3.1 score of 5.9. No official patch or remediation level is currently indicated in the vendor advisory.

The vulnerability allows a malicious D-Bus server to cause a client to read arbitrary files on the system by exploiting improper validation of the cookie_context parameter. This can result in the exfiltration of sensitive data if the attacker can verify guessed file contents against a generated hash. There is no indication of impact on integrity or availability, and no known exploits in the wild have been reported.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-58015 for current remediation guidance. No official fix or temporary workaround is currently documented. Until a patch is available, avoid connecting to untrusted D-Bus servers or restrict D-Bus client interactions to trusted servers only.