← CVE Intelligence

CVE-2026-58015

Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive PUBLISHED

Description (CNA)

A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication mechanism does not validate the cookie_context parameter received from the server. A malicious D-Bus server can supply a cookie_context containing path traversal sequences, causing the client to read an arbitrary file and exfiltrate sensitive data by verifying guessed file contents against a generated hash.

Affected (CNA)

Vendor / productVersions
GNOME / GLibaffected 0 before 2.88.1
Red Hat / Red Hat Enterprise Linux 10unaffected 0:2.80.4-12.el10_2.21 before *
Red Hat / Red Hat Enterprise Linux 10.0 Extended Update Supportunaffected 0:2.80.4-4.el10_0.17 before *
Red Hat / Red Hat Enterprise Linux 7 Extended Lifecycle Supportunaffected 0:2.56.1-13.el7_9.1 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:2.70.1-9.el8_10 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:2.56.4-177.el8_10 before *
Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportunaffected 0:2.56.4-10.el8_4.7 before *
Red Hat / Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-Onunaffected 0:2.56.4-10.el8_4.7 before *
Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportunaffected 0:2.56.4-158.el8_6.7 before *
Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-Onunaffected 0:2.56.4-158.el8_6.7 before *
Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Serviceunaffected 0:2.56.4-165.el8_8.2 before *
Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutionsunaffected 0:2.56.4-165.el8_8.2 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:2.68.4-19.el9_8.9 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:2.68.4-19.el9_8.9 before *
Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutionsunaffected 0:2.68.4-7.el9_2.7 before *
Red Hat / Red Hat Enterprise Linux 9.4 Update Services for SAP Solutionsunaffected 0:2.68.4-14.el9_4.8 before *
Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Supportunaffected 0:2.68.4-16.el9_6.7 before *
Red Hat / Red Hat OpenShift Container Platform 4.12unaffected 412.86.202609171314-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.13unaffected 413.92.202609302032-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.14unaffected 414.92.202609282130-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.15unaffected 415.92.202610081130-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.22unaffected 4.22.9.8.202609081748-0 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17unaffected 1791371080 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17unaffected 1791371069 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17unaffected 1791788287 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17unaffected 1791378395 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17unaffected 1791970484 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791459707 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791459711 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791459759 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1789029076 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791966259 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.19unaffected 1788348522 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.19unaffected 1788348571 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.19unaffected 1788348571 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.19unaffected 1788348594 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790223279 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790223719 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790272426 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790589998 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790589912 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790589914 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790589855 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790598593 before *
Red Hat / Red Hat AI Inference Server 3.2unaffected 1790621714 before *
Red Hat / Red Hat AI Inference Server 3.2unaffected 1790621718 before *
Red Hat / Red Hat AI Inference Server 3.2unaffected 1790621713 before *
Red Hat / Red Hat AI Inference Server 3.5unaffected 1791425869 before *
Red Hat / Red Hat AI Inference Server 3.5unaffected 1791427182 before *
Red Hat / Red Hat AI Inference Server 3.5unaffected 1791803821 before *
Red Hat / Red Hat AI Inference Server 3.5unaffected 1791473631 before *
Red Hat / Red Hat AI Inference Server 3.5unaffected 1791818357 before *
Red Hat / Red Hat AI Inference Server 3.5unaffected 1791473614 before *
Red Hat / Red Hat Discovery 2unaffected 1788205779 before *
Red Hat / Red Hat Discovery 2unaffected 1788206196 before *
Red Hat / Red Hat OpenShift AI 3.0unaffected 1790276886 before *
Red Hat / Red Hat OpenShift AI 3.0unaffected 1790276884 before *
Red Hat / Red Hat OpenShift AI 3.0unaffected 1790277045 before *
Red Hat / Red Hat OpenShift AI 3.0unaffected 1790276889 before *
Red Hat / Red Hat OpenShift AI 3.0unaffected 1790276974 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1790703497 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1790703506 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1790703590 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1790703568 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1790703586 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1790703494 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1790703542 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1790703539 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1790703553 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1790703631 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1790703597 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1790703641 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1790703630 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1790703541 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1790703545 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1791231926 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1791232048 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1790703552 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1790703656 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1790703557 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1790703707 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1790703645 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1790703554 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1790703554 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1790703630 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1790703706 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1787241211 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1787135742 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1787241260 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1788880445 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1788880464 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1788880456 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1788765051 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1788880581 before *
Red Hat / Red Hat Enterprise Linux 10affected
Red Hat / Red Hat Enterprise Linux 6affected
Red Hat / Red Hat Enterprise Linux 9affected
Red Hat / Red Hat Hardened Imagesunaffected

CWE

CWE-22

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.