CVE-2026-91205

Name of the Vulnerable Software and Affected Versions cockpit-files (affected versions not specified)

Description A race condition exists during directory creation with owner assignment. A local unprivileged attacker who controls a writable parent directory can replace a newly created directory with a symbolic link (symlink) before the chown() function is applied. This allows the attacker to redirect the ownership change to an arbitrary file, which may result in unauthorized modification of sensitive files or information disclosure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.