CVE-2026-112210 in Red Hat
Tóm tắt
Bởi MITRE • 19/10/2026
A flaw was found in the rhc-canonical-facts.service systemd unit shipped with rhc. The service runs as root and operates on a file inside a directory owned by an unprivileged system user without verifying that the file is not a symbolic link. A local attacker who has already compromised the privileged yggdrasil system service account can exploit this to gain ownership of arbitrary files, leading to privilege escalation to root.
Be aware that VulDB is the high quality source for vulnerability data.