CVE-2026-58015

Tuesday, June 30, 2026

5.9

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Summary

A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication mechanism does not validate the cookie_context parameter received from the server. A malicious D-Bus server can supply a cookie_context containing path traversal sequences, causing the client to read an arbitrary file and exfiltrate sensitive data by verifying guessed file contents against a generated hash.

Affected Software

Vendor	Product	Version Range	Status
GNOME	GLib	`0 < 2.88.1`	affected
Red Hat	Red Hat Enterprise Linux 10	`0:2.80.4-12.el10_2.21 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	`0:2.80.4-4.el10_0.17 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	`0:2.56.1-13.el7_9.1 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8	`0:2.70.1-9.el8_10 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8	`0:2.56.4-177.el8_10 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	`0:2.56.4-10.el8_4.7 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	`0:2.56.4-10.el8_4.7 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	`0:2.56.4-158.el8_6.7 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On	`0:2.56.4-158.el8_6.7 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	`0:2.56.4-165.el8_8.2 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	`0:2.56.4-165.el8_8.2 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 9	`0:2.68.4-19.el9_8.9 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 9	`0:2.68.4-19.el9_8.9 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	`0:2.68.4-7.el9_2.7 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	`0:2.68.4-14.el9_4.8 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	`0:2.68.4-16.el9_6.7 < *`	unaffected
Red Hat	Red Hat OpenShift Container Platform 4.12	`412.86.202609171314-0 < *`	unaffected
Red Hat	Red Hat OpenShift Container Platform 4.22	`4.22.9.8.202609081748-0 < *`	unaffected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.19	`1788348522 < *`	unaffected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.19	`1788348571 < *`	unaffected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.19	`1788348571 < *`	unaffected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.19	`1788348594 < *`	unaffected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20	`1790223279 < *`	unaffected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20	`1790223719 < *`	unaffected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20	`1790272426 < *`	unaffected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20	`1790589998 < *`	unaffected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20	`1790589912 < *`	unaffected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20	`1790589914 < *`	unaffected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20	`1790589855 < *`	unaffected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20	`1790598593 < *`	unaffected
Red Hat	Red Hat AI Inference Server 3.2	`1790621714 < *`	unaffected
Red Hat	Red Hat AI Inference Server 3.2	`1790621718 < *`	unaffected
Red Hat	Red Hat AI Inference Server 3.2	`1790621713 < *`	unaffected
Red Hat	Red Hat Discovery 2	`1788205779 < *`	unaffected
Red Hat	Red Hat Discovery 2	`1788206196 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.0	`1790276886 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.0	`1790276884 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.0	`1790277045 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.0	`1790276889 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.0	`1790276974 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.2	`1790703497 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.2	`1790703506 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.2	`1790703590 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.2	`1790703568 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.2	`1790703586 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.2	`1790703494 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.4	`1790703542 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.4	`1790703539 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.4	`1790703553 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.4	`1790703631 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.4	`1790703597 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.4	`1790703641 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.4	`1790703630 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.4	`1790703541 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.4	`1790703545 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.5	`1790703552 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.5	`1790703656 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.5	`1790703557 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.5	`1790703707 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.5	`1790703645 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.5	`1790703554 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.5	`1790703554 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.5	`1790703630 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.5	`1790703706 < *`	unaffected
Red Hat	Red Hat Update Infrastructure 5	`1787241211 < *`	unaffected
Red Hat	Red Hat Update Infrastructure 5	`1787135742 < *`	unaffected
Red Hat	Red Hat Update Infrastructure 5	`1787241260 < *`	unaffected
Red Hat	Red Hat Update Infrastructure 5	`1788880445 < *`	unaffected
Red Hat	Red Hat Update Infrastructure 5	`1788880464 < *`	unaffected
Red Hat	Red Hat Update Infrastructure 5	`1788880456 < *`	unaffected
Red Hat	Red Hat Update Infrastructure 5	`1788765051 < *`	unaffected
Red Hat	Red Hat Update Infrastructure 5	`1788880581 < *`	unaffected

Weaknesses

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Workarounds

To mitigate this vulnerability, ensure that applications only connect to trusted D-Bus servers and operate within secure, isolated networks to prevent man-in-the-middle (MitM) attacks. If feasible, configuring the D-Bus connection to strictly require the EXTERNAL authentication mechanism and disabling DBUS_COOKIE_SHA1 will completely neutralize this issue.

ADP Enrichment

CISA ADP Vulnrichment

SSVC:
Exploitation: none
- Automatable: no
- Technical Impact: partial

References

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.