CVE-2026-92745

Name of the Vulnerable Software and Affected Versions cockpit-machines (affected versions not specified)

Description A flaw allows a local attacker with the ability to inspect process metadata to disclose a sensitive Red Hat Subscription Management (RHSM) offline token. The token is exposed when passed as a command-line argument to a helper script during the token validation process. This exposure can lead to a compromise of confidentiality, as the token can be used to request access tokens.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.