CVE-2026-91149 PUBLISHED

Cockpit: cockpit: denial of service via unbounded connection thread spawning

Assigner: redhat
Reserved: 14.09.2026 Published: 18.09.2026 Updated: 18.09.2026

A flaw was found in Cockpit. An unauthenticated remote attacker can exploit this vulnerability by initiating and sustaining numerous simultaneous connections to the cockpit-tls service. This forces the service to create an unbounded number of detached threads, consuming system resources such as memory and file descriptors. The primary consequence is a denial of service (DoS), leading to degradation or complete unavailability of the Cockpit service for legitimate users.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Score: 7.5

Product Status

Vendor Red Hat
Product Red Hat Enterprise Linux 10
Versions Default: affected
Vendor Red Hat
Product Red Hat Enterprise Linux 7
Versions Default: affected
Vendor Red Hat
Product Red Hat Enterprise Linux 8
Versions Default: affected
Vendor Red Hat
Product Red Hat Enterprise Linux 9
Versions Default: affected
Vendor Red Hat
Product Red Hat OpenShift Dev Spaces
Versions Default: affected
Vendor Red Hat
Product Red Hat OpenShift Dev Spaces
Versions Default: affected
Vendor Red Hat
Product Red Hat OpenShift Dev Spaces
Versions Default: affected

Credits

  • This issue was discovered by AISLE Research and Found by AISLE in partnership with Red Hat.

References

Problem Types

  • Allocation of Resources Without Limits or Throttling CWE