CVE-2026-113495

The record

A flaw was found in cockpit-machines. Red Hat Subscription Management (RHSM) authentication tokens are passed as command-line arguments to background helper processes during image retrieval operations. A local, unprivileged attacker on a system permitting cross-user process inspection can view these arguments while the process is active. This flaw can lead to information disclosure, potentially allowing unauthorized access to RHSM resources within the token's validity period.

Affected packages

Related vulnerabilities

• CVE-2026-116246 To pass a server's password to psql and to the utilities pgAdmin 4 runs as background… CWE-214
• CVE-2026-119117 Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for… CWE-214
• CVE-2026-113496 A flaw was found in cockpit-machines. CWE-214
• CVE-2026-109971 A flaw was found in the clevis PKCS#11 pin. CWE-214
• CVE-2026-81684 In openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8, the desktop GUI… CWE-214
• CVE-2026-80158 A flaw was found in the ipa_getkeytab module of the community.general Ansible collection. CWE-214
• CVE-2026-65088 NVIDIA NemoClaw contains a vulnerability where an attacker could cause invocation of… CWE-214
• CVE-2026-18915 Invocation of process using visible sensitive information vulnerability in TÜBİTAK BİLGEM… CWE-214