https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:32:46.580837+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-373593 EUVD-2026-373593 2026-10-02T11:32:46.655277+00:00 EUVD-2026-373593 https://cve.radiocsirt.org/vuln/fkie_cve-2026-91202 fkie_cve-2026-91202 2026-10-02T11:32:46.655314+00:00

A flaw was found in cockpit-files. A low-privileged local user can exploit this vulnerability by crafting a directory containing a symbolic link (symlink) and then using the privileged "Paste as owner" function. This allows for arbitrary file ownership changes outside the intended pasted directory, leading to a compromise of data integrity. In some cases, this could also lead to reduced confidentiality if the new ownership grants unauthorized read access. Exploitation requires user interaction to select a non-original owner during the paste operation.

 https://cve.radiocsirt.org/vuln/ghsa-2g9g-mfvg-w359 GHSA-2g9g-mfvg-w359 2026-10-02T11:32:46.655350+00:00

A flaw was found in cockpit-files. A low-privileged local user can exploit this vulnerability by crafting a directory containing a symbolic link (symlink) and then using the privileged "Paste as owner" function. This allows for arbitrary file ownership changes outside the intended pasted directory, leading to a compromise of data integrity. In some cases, this could also lead to reduced confidentiality if the new ownership grants unauthorized read access. Exploitation requires user interaction to select a non-original owner during the paste operation.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11844-1 openSUSE-SU-2026:11844-1 — cockpit-files-44-1.1 on GA media 2026-10-02T11:32:46.655371+00:00

cockpit-files-44-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-91202 UBUNTU-CVE-2026-91202 2026-10-02T11:32:46.655390+00:00

Affected: Ubuntu:26.04:LTS: cockpit-files

A flaw was found in cockpit-files. A low-privileged local user can exploit this vulnerability by crafting a directory containing a symbolic link (symlink) and then using the privileged "Paste as owner" function. This allows for arbitrary file ownership changes outside the intended pasted directory, leading to a compromise of data integrity. In some cases, this could also lead to reduced confidentiality if the new ownership grants unauthorized read access. Exploitation requires user interaction to select a non-original owner during the paste operation.