[ CVE-2026-112210 · Published 19 Oct 2026 ]
Vulnerability in Red Hat Enterprise Linux 10
CVSS 6.0
EPSS <1%No fix listed yet
[ Description ]Official description
A flaw was found in the rhc-canonical-facts.service systemd unit shipped with rhc. The service runs as root and operates on a file inside a directory owned by an unprivileged system user without verifying that the file is not a symbolic link. A local attacker who has already compromised the privileged yggdrasil system service account can exploit this to gain ownership of arbitrary files, leading to privilege escalation to root.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.