CVE-2026-92768

A flaw was found in cockpit-machines. This vulnerability allows a local attacker to expose sensitive Virtual Machine (VM) credentials, including plaintext passwords, by inspecting process command-line arguments during VM creation or installation. The cockpit-machines component passes password values directly on the command line, making them visible to other local users on systems where process arguments are not restricted. Successful exploitation leads to information disclosure, potentially compromising VM access.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://access.redhat.com/errata/RHSA-2026:86970
https://access.redhat.com/errata/RHSA-2026:86971
https://access.redhat.com/security/cve/CVE-2026-92768
https://bugzilla.redhat.com/show_bug.cgi?id=2469258
https://bugzilla.redhat.com/show_bug.cgi?id=2469258

Configurations

No configuration.

History

21 Oct 2026, 14:17

Type	Values Removed	Values Added
References		() https://access.redhat.com/errata/RHSA-2026:86970 - () https://access.redhat.com/errata/RHSA-2026:86971 -

22 Sep 2026, 17:17

Type	Values Removed	Values Added
References	~~() https://bugzilla.redhat.com/show_bug.cgi?id=2469258 -~~	() https://bugzilla.redhat.com/show_bug.cgi?id=2469258 -

18 Sep 2026, 20:17

Type	Values Removed	Values Added
CWE		CWE-214

18 Sep 2026, 18:18

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-09-18 18:18

Updated : 2026-10-21 14:17

NVD link : CVE-2026-92768

Mitre link : CVE-2026-92768

CVE.ORG link : CVE-2026-92768

JSON object : View

Products Affected

No product.

CWE

CWE-214

Invocation of Process Using Visible Sensitive Information

{"id": "CVE-2026-92768", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-92768", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-22T16:18:50.692537Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "secalert@redhat.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "affected": [{"source": "secalert@redhat.com", "affectedData": [{"cpes": ["cpe:/o:redhat:enterprise_linux:10.2"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "versions": [{"status": "unaffected", "version": "0:348.1-1.el10_2", "lessThan": "*", "versionType": "rpm"}], "packageName": "cockpit-machines", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:enterprise_linux:9::appstream"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "versions": [{"status": "unaffected", "version": "0:348.1-1.el9_8", "lessThan": "*", "versionType": "rpm"}], "packageName": "cockpit-machines", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}]}], "published": "2026-09-18T18:18:17.150", "references": [{"url": "https://access.redhat.com/errata/RHSA-2026:86970", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:86971", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/security/cve/CVE-2026-92768", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2469258", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2469258", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-214"}]}], "descriptions": [{"lang": "en", "value": "A flaw was found in cockpit-machines. This vulnerability allows a local attacker to expose sensitive Virtual Machine (VM) credentials, including plaintext passwords, by inspecting process command-line arguments during VM creation or installation. The cockpit-machines component passes password values directly on the command line, making them visible to other local users on systems where process arguments are not restricted. Successful exploitation leads to information disclosure, potentially compromising VM access."}], "lastModified": "2026-10-21T14:17:22.397", "sourceIdentifier": "secalert@redhat.com"}