CVE-2026-91202 — cockpit-files: arbitrary file ownership change via symlink following in privileged paste

cockpit-files contains a flaw that a low-privileged local user can exploit by creating a directory containing a symbolic link and using the privileged “Paste as owner” function. This can allow arbitrary file ownership changes outside the intended pasted directory, compromising data integrity. In some cases, confidentiality may also be reduced if the new ownership grants unauthorized read access.