UBUNTU-CVE-2026-91205

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2026-91205

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91205.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2026-91205

Upstream

CVE-2026-91205

Published

2026-09-18T20:17:00Z

Modified

2026-09-23T23:39:28Z

Severity

6.0 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N CVSS Calculator
Ubuntu - medium

Summary

[none]

Details

A flaw was found in cockpit-files. A local unprivileged attacker can exploit a race condition during directory creation with owner assignment. By controlling a writable parent directory, the attacker can replace a newly created directory with a symbolic link (symlink) before the ownership change operation (chown) is applied. This allows the attacker to redirect the ownership change to an arbitrary file, potentially leading to information disclosure or unauthorized modification of sensitive files.

References

Affected packages

Ubuntu:26.04:LTS / cockpit-files

Package

Name: cockpit-files
Purl: pkg:deb/ubuntu/cockpit-files?arch=source&distro=resolute

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

Other

36-1

39-1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "cockpit-files",
            "binary_version":  "39-1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91205.json"