Red Hat Security AdvisoryRHSA-2026:7381
cockpit: Unauthenticated remote code execution due to SSH command-line argument injection
Released 2026-04-10 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) cockpit-packagekit-334.1-3.el10_0, cockpit-storaged-334.1-3.el10_0
- Red Hat Enterprise Linux BaseOS EUS (v. 10.0) cockpit-334.1-3.el10_0, cockpit-bridge-334.1-3.el10_0, cockpit-doc-334.1-3.el10_0 +2
Fixes 1 record
Priority MEDIUM 59
Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or sanitization.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.1548 · Published 2026-04-07 · Fixed in 344-3.el10_1, 356.1-1.el10_2 +4 CWE-78
