[ CVE-2026-85013 · Published 15 Sep 2026 ]
Vulnerability in Red Hat Enterprise Linux 10
CVSS 7.3
EPSS <1%1 agency advisoryNo fix listed yet
[ Why it matters ]Priority signals
- Public proof-of-concept exploit exists (CISA SSVC)
[ Description ]Official description
A flaw was found in environment-modules. A local attacker can exploit this vulnerability by placing a maliciously named modulefile in a location visible to the victim's `MODULEPATH`. When the victim uses Bash completion for `module` or `ml` commands, the malicious module name, containing shell metacharacters, is evaluated as a command. This can lead to arbitrary command execution in the completing user's shell, impacting their confidentiality, integrity, and availability.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.
[ Advisories ]Government CERT advisories
-
BSI CERT-BundWID-SEC-2026-3883
Red Hat Enterprise Linux (goose, environment-modules, tornado): Multiple vulnerabilities Translated from German
[ References ]References
- access.redhat.com/errata/RHSA-2026:64766vendor-advisoryx_refsource_REDHAT
- access.redhat.com/errata/RHSA-2026:80664vendor-advisoryx_refsource_REDHAT
- access.redhat.com/errata/RHSA-2026:82919vendor-advisoryx_refsource_REDHAT
- access.redhat.com/errata/RHSA-2026:84594vendor-advisoryx_refsource_REDHAT
- access.redhat.com/security/cve/CVE-2026-85013vdb-entryx_refsource_REDHAT
- bugzilla.redhat.com/show_bug.cgiissue-trackingx_refsource_REDHAT
- github.com/envmodules/modules/security/advisories/GHSA-8hrw-p88g-qhmg