CVE-2026-4631 - Vulnerability Analysis

Overview

Cockpit contains a command injection caused by unsanitized user-supplied hostnames and usernames passed to the SSH client in the remote login feature, letting attackers with network access execute code without credentials, exploit requires network access to the web service.

Severity & Score

Impact

Attackers can execute arbitrary code on the Cockpit host without valid credentials, leading to full system compromise.

Mitigation

Update to the latest version with input validation and sanitization for SSH parameters.

References

• https://access.redhat.com/security/cve/CVE-2026-4631
• https://bugzilla.redhat.com/show_bug.cgi?id=2450246

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner