Privilege Escalation Vulnerability in rhc by Red Hat

CVE-2026-112210

What is CVE-2026-112210?

A vulnerability exists in the rhc-canonical-facts.service systemd unit provided with the rhc tool. This service operates with root privileges and engages with a file located within a directory that is owned by a non-privileged system user. The flaw arises from the lack of verification to ensure that the file is not a symbolic link. A local attacker who has gained access to the privileged yggdrasil system service account can exploit this weakness to take ownership of arbitrary files, facilitating privilege escalation to root. This vulnerability underscores the importance of proper verification mechanisms in services running with elevated privileges.

References