Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment
Priority LOW 35CWE-319Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · Low · None
- Fix status
- Partial Red Hat: 24 fixed, 1 without a fix
Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-319.
Summary
A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in cleartext within the initial HTTP CONNECT request. A network-positioned attacker or a malicious HTTP proxy can intercept these cookies, leading to potential session hijacking or user impersonation.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00259 17th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Partial Red Hat: 14 advisoriesRed Hat: 24 fixed, 1 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | — | 3.6.5-3.el10_1.11 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 10 | — | 3.6.5-3.el10_2.11 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | — | 3.6.5-3.el10_0.15 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support | — | 2.62.2-12.el7_9 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | 2.62.3-14.el8_10 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | 2.62.3-14.el8_10 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | — | 2.62.3-2.el8_4.9 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | — | 2.62.3-2.el8_4.9 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | — | 2.62.3-2.el8_6.9 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On | — | 2.62.3-2.el8_6.9 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service | — | 2.62.3-3.el8_8.9 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | — | 2.62.3-3.el8_8.9 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 2.72.0-12.el9_7.6 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 2.72.0-16.el9_8.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | — | 2.72.0-8.el9_0.10 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | — | 2.72.0-8.el9_2.11 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | — | 2.72.0-8.el9_4.10 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | — | 2.72.0-10.el9_6.7 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 6 | — | — | No fix listed | CNA |
- Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in 3.6.5-3.el10_1.11 Patch available CNA
- Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in 3.6.5-3.el10_2.11 Patch available CNA
- Red Hat Enterprise Linux 10.0 Extended Update Support VendorRed Hat Affected — Fixed in 3.6.5-3.el10_0.15 Patch available CNA
- Red Hat Enterprise Linux 7 Extended Lifecycle Support VendorRed Hat Affected — Fixed in 2.62.2-12.el7_9 Patch available CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 2.62.3-14.el8_10 Patch available CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 2.62.3-14.el8_10 Patch available CNA
- Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 2.62.3-2.el8_4.9 Patch available CNA
- Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 2.62.3-2.el8_4.9 Patch available CNA
- Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 2.62.3-2.el8_6.9 Patch available CNA
- Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 2.62.3-2.el8_6.9 Patch available CNA
- Red Hat Enterprise Linux 8.8 Telecommunications Update Service VendorRed Hat Affected — Fixed in 2.62.3-3.el8_8.9 Patch available CNA
- Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 2.62.3-3.el8_8.9 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 2.72.0-12.el9_7.6 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 2.72.0-16.el9_8.1 Patch available CNA
- Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 2.72.0-8.el9_0.10 Patch available CNA
- Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 2.72.0-8.el9_2.11 Patch available CNA
- Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 2.72.0-8.el9_4.10 Patch available CNA
- Red Hat Enterprise Linux 9.6 Extended Update Support VendorRed Hat Affected — Fixed in 2.72.0-10.el9_6.7 Patch available CNA
- Red Hat Enterprise Linux 6 VendorRed Hat Affected — Fixed in — No fix listed CNA
CPE configurations NVD · 5
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:gnome:libsoup:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | GNOME |
| cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* | 8.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* | 9.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:* | 10.0 | Vulnerable | Red Hat |
- cpe:2.3:a:gnome:libsoup:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·GNOME
- cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Red Hat
Remediation
Red Hat 14 advisories
- RHSA-2026:24722 Released 2026-06-09 · Red Hat rating Moderatelibsoup security update
- Red Hat Enterprise Linux Server (v. 7 ELS) libsoup-2.62.2-12.el7_9, libsoup-2.62.2-12.el7_9.ppc, libsoup-devel-2.62.2-12.el7_9 +1
- RHSA-2026:24344 Released 2026-06-08 · Red Hat rating Moderatelibsoup security update
- Red Hat Enterprise Linux AppStream AUS (v.8.6) libsoup-devel-2.62.3-2.el8_6.9
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) libsoup-devel-2.62.3-2.el8_6.9
- Red Hat Enterprise Linux BaseOS AUS (v.8.6) libsoup-2.62.3-2.el8_6.9
- Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) libsoup-2.62.3-2.el8_6.9
- RHSA-2026:22716 Released 2026-06-03 · Red Hat rating Moderatelibsoup security update
- Red Hat Enterprise Linux AppStream AUS (v.8.4) libsoup-devel-2.62.3-2.el8_4.9
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) libsoup-devel-2.62.3-2.el8_4.9
- Red Hat Enterprise Linux BaseOS AUS (v.8.4) libsoup-2.62.3-2.el8_4.9
- Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) libsoup-2.62.3-2.el8_4.9
Show 11 more Red Hat advisories
- RHSA-2026:22710 Released 2026-06-03 · Red Hat rating Moderatelibsoup security update
- Red Hat Enterprise Linux AppStream E4S (v.8.8) libsoup-devel-2.62.3-3.el8_8.9
- Red Hat Enterprise Linux AppStream TUS (v.8.8) libsoup-devel-2.62.3-3.el8_8.9
- Red Hat Enterprise Linux BaseOS E4S (v.8.8) libsoup-2.62.3-3.el8_8.9
- Red Hat Enterprise Linux BaseOS TUS (v.8.8) libsoup-2.62.3-3.el8_8.9
- RHSA-2026:22323 Released 2026-06-01 · Red Hat rating Moderatelibsoup security update
- Red Hat Enterprise Linux AppStream E4S (v.9.4) libsoup-2.72.0-8.el9_4.10, libsoup-devel-2.72.0-8.el9_4.10
- RHSA-2026:22317 Released 2026-06-01 · Red Hat rating Moderatelibsoup security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) libsoup-2.72.0-10.el9_6.7, libsoup-devel-2.72.0-10.el9_6.7
- RHSA-2026:22316 Released 2026-06-01 · Red Hat rating Moderatelibsoup security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) libsoup-2.72.0-8.el9_2.11, libsoup-devel-2.72.0-8.el9_2.11
- RHSA-2026:21686 Released 2026-05-28 · Red Hat rating Moderatelibsoup security update
- Red Hat Enterprise Linux AppStream E4S (v.9.0) libsoup-2.72.0-8.el9_0.10, libsoup-devel-2.72.0-8.el9_0.10
- RHSA-2026:19356 Released 2026-05-19 · Red Hat rating Moderatelibsoup security update
- Red Hat Enterprise Linux AppStream (v. 9) libsoup-2.72.0-16.el9_8.1, libsoup-devel-2.72.0-16.el9_8.1
- RHSA-2026:19143 Released 2026-05-19 · Red Hat rating Moderatelibsoup3 security update
- Red Hat Enterprise Linux AppStream (v. 10) libsoup3-3.6.5-3.el10_2.11, libsoup3-devel-3.6.5-3.el10_2.11
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) libsoup3-doc-3.6.5-3.el10_2.11
- RHSA-2026:17482 Released 2026-05-14 · Red Hat rating Moderatelibsoup3 security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) libsoup3-3.6.5-3.el10_0.15, libsoup3-devel-3.6.5-3.el10_0.15
- Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) libsoup3-doc-3.6.5-3.el10_0.15
- RHSA-2026:15968 Released 2026-05-11 · Red Hat rating Moderatelibsoup3 security update
- Red Hat Enterprise Linux AppStream (v. 10) libsoup3-3.6.5-3.el10_1.11, libsoup3-devel-3.6.5-3.el10_1.11
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) libsoup3-doc-3.6.5-3.el10_1.11
- RHSA-2026:14087 Released 2026-05-06 · Red Hat rating Moderatelibsoup security update
- Red Hat Enterprise Linux AppStream (v. 8) libsoup-devel-2.62.3-14.el8_10
- Red Hat Enterprise Linux BaseOS (v. 8) libsoup-2.62.3-14.el8_10
- RHSA-2026:13978 Released 2026-05-06 · Red Hat rating Moderatelibsoup security update
- Red Hat Enterprise Linux AppStream (v. 9) libsoup-2.72.0-12.el9_7.6, libsoup-devel-2.72.0-12.el9_7.6
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 6 | Affected | No fix planned: Out of support scope |
| Red Hat Enterprise Linux AppStream (v. 10) | Fixed | RHSA-2026:15968, RHSA-2026:19143 |
| Red Hat Enterprise Linux AppStream (v. 8) | Fixed | RHSA-2026:14087 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2026:13978, RHSA-2026:19356 |
| Red Hat Enterprise Linux AppStream AUS (v.8.4) | Fixed | RHSA-2026:22716 |
| Red Hat Enterprise Linux AppStream AUS (v.8.6) | Fixed | RHSA-2026:24344 |
| Red Hat Enterprise Linux AppStream E4S (v.8.8) | Fixed | RHSA-2026:22710 |
| Red Hat Enterprise Linux AppStream E4S (v.9.0) | Fixed | RHSA-2026:21686 |
| Red Hat Enterprise Linux AppStream E4S (v.9.2) | Fixed | RHSA-2026:22316 |
| Red Hat Enterprise Linux AppStream E4S (v.9.4) | Fixed | RHSA-2026:22323 |
| Red Hat Enterprise Linux AppStream EUS (v. 10.0) | Fixed | RHSA-2026:17482 |
| Red Hat Enterprise Linux AppStream EUS (v.9.6) | Fixed | RHSA-2026:22317 |
| Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) | Fixed | RHSA-2026:22716 |
| Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) | Fixed | RHSA-2026:24344 |
| Red Hat Enterprise Linux AppStream TUS (v.8.8) | Fixed | RHSA-2026:22710 |
| Red Hat Enterprise Linux BaseOS (v. 8) | Fixed | RHSA-2026:14087 |
| Red Hat Enterprise Linux BaseOS AUS (v.8.4) | Fixed | RHSA-2026:22716 |
| Red Hat Enterprise Linux BaseOS AUS (v.8.6) | Fixed | RHSA-2026:24344 |
| Red Hat Enterprise Linux BaseOS E4S (v.8.8) | Fixed | RHSA-2026:22710 |
| Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) | Fixed | RHSA-2026:22716 |
| Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) | Fixed | RHSA-2026:24344 |
| Red Hat Enterprise Linux BaseOS TUS (v.8.8) | Fixed | RHSA-2026:22710 |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) | Fixed | RHSA-2026:15968, RHSA-2026:19143 |
| Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) | Fixed | RHSA-2026:17482 |
| Red Hat Enterprise Linux Server (v. 7 ELS) | Fixed | RHSA-2026:24722 |
Timeline
- 2026-10-02 Threatist record created from CVE-2026-5119
- 2026-10-03 Alias added: GHSA-j666-j6hj-fpc7
References
More Red Hat Enterprise Linux vulnerabilities
- TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
- TI-2018-10530 Code injection in [UNKNOWN] RichFaces KEVCVSS 3.1CRITICAL 9.8
- TI-2014-05975 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed… KEVCVSS 3.1CRITICAL 9.8
- TI-2014-05157 GNU Bash through 4.3 processes trailing strings after function definitions in the values… KEVCVSS 3.1CRITICAL 9.8
- TI-2025-23530 Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf… KEVCVSS 3.1CRITICAL 9.3
- TI-2021-17490 mod_proxy SSRF KEVCVSS 3.1CRITICAL 9.0
Sources
- CVE-2026-5119 · CVE Program
- CVE-2026-5119 · NVD
- FIRST EPSS
- GHSA-j666-j6hj-fpc7 · GitHub Advisory Database · CC BY 4.0
- CVE-2026-5119 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences