Cockpit is vulnerable to directory traversal

Description

References

• nvd.nist.gov/vuln/detail/CVE-2026-38993 · ADVISORY
• felsec.com/posts/cockpit-cms-2.13.5-multi-vulns · WEB
• Cockpit-HQ/Cockpit · PACKAGE
• Cockpit-HQ/Cockpit release 2.14.0 · WEB
• felsec.com/posts/cockpit-cms-2.13.5-multi-vulns
• access.redhat.com/security/cve/CVE-2026-38993
• bugzilla.redhat.com/show_bug.cgi
• security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-38993.json

More vulnerabilities in cockpit-hq/cockpit

• CVE-2026-23695MEDIUM 5.4Cockpit CMS through version 2.14.0, patched in commit 72a83fc, contains a stored cross-site scripting vulnerability in the Set field type's …
• CVE-2026-38991HIGH 8.8Cockpit 2.13.5 and earlier is affected by a misconfiguration within the Bucket component _isFileTypeAllowed function where a specially craft…
• CVE-2026-38992CRITICAL 9.8Cockpit v2.13.5 and earlier is vulnerable to arbitrary code execution via the filter parameter within multiple endpoints. This vulnerability…
• CVE-2026-6626MEDIUM 6.3A vulnerability was detected in Cockpit-HQ Cockpit up to 2.13.5. Affected by this issue is some unknown functionality of the component Asset…
• CVE-2026-31891MEDIUM 6.5Cockpit is a headless content management system. Any Cockpit CMS instance running version 2.13.4 or earlier with API access enabled is poten…