Threats tagged 'ghsa-2wj2-6xq8-f5rx'

CVE-2026-91203 is a race condition vulnerability in cockpit-files on Red Hat Enterprise Linux 10. It allows a local attacker to exploit a symlink race during privileged file operations, such as changing file ownership or permissions. By winning this timing race, the attacker can redirect these operations to arbitrary files, potentially causing unauthorized changes to file ownership and permissions. This may compromise system integrity and availability by altering system or application states or making services unusable.