CVE-2026-92745 Cockpit-machines: cockpit-machines: information disclosure of rhsm offline token via process arguments
Local attackers can read sensitive RHSM offline tokens from process arguments, potentially compromising subscription management access.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2026-92745?
CVE-2026-92745 is a medium-severity vulnerability in Red Hat Enterprise Linux 10, published on 18 Sep 2026. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
A flaw was found in cockpit-machines. This vulnerability allows a local attacker with the ability to inspect process metadata to disclose a sensitive Red Hat Subscription Management (RHSM) offline token. The token is exposed when it is passed as a command-line argument to a helper script during the token validation process. Successful exploitation could lead to the compromise of confidentiality, as the exposed token can be used to request access tokens.
Weakness: CWE-214
Which versions are affected by CVE-2026-92745?
How do I fix CVE-2026-92745?
Apply the vendor's patch.
Is CVE-2026-92745 being exploited?
There is no known exploitation of CVE-2026-92745 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2026-92745, GHSA-gp59-h6j7-4p3h, UBUNTU-CVE-2026-92745.