Red Hat Security AdvisoryRHSA-2026:7384
cockpit: Unauthenticated remote code execution due to SSH command-line argument injection
Released 2026-04-10 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) cockpit-packagekit-344-2.el9_7, cockpit-storaged-344-2.el9_7
- Red Hat Enterprise Linux BaseOS (v. 9) cockpit-344-2.el9_7, cockpit-bridge-344-2.el9_7, cockpit-doc-344-2.el9_7 +3
Fixes 1 record
Priority MEDIUM 59
Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or sanitization.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.1548 · Published 2026-04-07 · Fixed in 344-3.el10_1, 356.1-1.el10_2 +4 CWE-78
