Improper Access Control Vulnerability in systemd Affects Red Hat Enterprises
CVE-2026-4105
6.7MEDIUM
What is CVE-2026-4105?
A vulnerability exists in the systemd-machined service within systemd, stemming from insufficient validation of the class parameter in the RegisterMachine D-Bus method. This flaw enables a local unprivileged user to register a machine with a specific class value, potentially leaving behind an attacker-controlled machine object. Consequently, an attacker could invoke methods on this privileged object, allowing for the execution of arbitrary commands with root privileges, thus posing a significant risk to the security of the host system.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
References
CVSS V3.1
Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Red Hat would like to thank Asim Viladi Oglu Manizada for reporting this issue.