Issued at: 2026-10-22
Updated at: 2026-10-22
Advisory content derived from Red Hat RHSA-2026:86970, © Red Hat, Inc., used under CC BY 4.0, with modifications.
Synopsis
Moderate: cockpit-machines security update
Description
Cockpit component for managing libvirt virtual machines.
Security Fix(es):
* cockpit-machines: cockpit-machines: Sensitive data exposure via command-line arguments (CVE-2026-92768)
* cockpit-machines: cockpit-machines: Sensitive Data Exposure of guest credentials via JSON argument in process list (CVE-2026-92747)
* cockpit-machines: cockpit-machines: Information Disclosure of RHSM Offline Token via Process Arguments (CVE-2026-92745)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.