This vulnerability involves improper limitation of a pathname to a restricted directory (path traversal) in the chat session handler component of Red Hat Enterprise Linux AI (RHEL AI) 3. By manipulating the 'logs_dir' parameter, a local attacker with low privileges can write files and create directories arbitrarily on the system, potentially compromising data confidentiality and integrity. The CVSS 3.1 score is 7.1, reflecting high impact on confidentiality and integrity but no impact on availability. The vendor advisory does not currently specify a remediation or patch status.

Successful exploitation allows a local attacker to write files and create directories outside the intended restricted directory, potentially leading to unauthorized data modification or disclosure. The impact affects confidentiality and integrity but does not affect system availability. No known public exploits have been reported.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-6855 for current remediation guidance. Until an official fix is available, restrict local user access and monitor for suspicious activity related to file creation or modification in unexpected directories. Avoid relying on this vulnerability being mitigated without vendor confirmation.