Threats tagged 'ghsa-227r-2gp9-9mw3'

CVE-2026-92768 is a vulnerability in the cockpit-machines component of Red Hat Enterprise Linux 10 that allows local attackers to expose sensitive VM credentials, including plaintext passwords. This occurs because passwords are passed via command-line arguments during VM creation or installation, making them visible to other local users if process argument visibility is not restricted. Exploitation requires local access and a specific execution window. The vulnerability leads to information disclosure that could compromise VM access.