CVE-2026-58467 — Path Traversal in Cockpit-hq Cockpit

Vendor	Product	Version range	Fixed in
agentejo	cockpit	—	—
cockpit-hq	cockpit	<= 2.14.0	—

VulDB

cockpit-project cockpit up to 363 PHP File include path traversal

vuldb·2026-07-02·CVSS 7.5

CVE-2026-58467 [HIGH] cockpit-project cockpit up to 363 PHP File include path traversal A vulnerability classified as critical was found in cockpit-project cockpit up to 363. This issue affects the function include of the component PHP File Handler. The manipulation results in path traversal. This vulnerability is cataloged as CVE-2026-58467. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is advised.

GHSA

Cockpit CMS before release 364 contains a path traversal and local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files or execute PHP files by including unvalida

ghsa_unreviewed·2026-07-02

CVE-2026-58467 [HIGH] CWE-22 Cockpit CMS before release 364 contains a path traversal and local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files or execute PHP files by including unvalida Cockpit CMS before release 364 contains a path traversal and local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files or execute PHP files by including unvalidated PATH_INFO derived from REQUEST_URI in filesystem path construction without containment checks. Attackers can inject dot-dot sequences into the URL to traverse outside the designated spaces directory, and when the resolved path ends with a .php extension, the application passes it to include(), enabling local file inclusion on deployments using the PHP built-in server or certain non-default Nginx configurations.

Red Hat

cockpit: Cockpit CMS: Arbitrary file read and code execution via path traversal

vendor_redhat·2026-07-02·CVSS 7.5

CVE-2026-58467 [HIGH] CWE-22 cockpit: Cockpit CMS: Arbitrary file read and code execution via path traversal cockpit: Cockpit CMS: Arbitrary file read and code execution via path traversal Cockpit CMS before release 364 contains a path traversal and local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files or execute PHP files by including unvalidated PATH_INFO derived from REQUEST_URI in filesystem path construction without containment checks. Attackers can inject dot-dot sequences into the URL to traverse outside the designated spaces directory, and when the resolved path ends with a .php extension, the application passes it to include(), enabling local file inclusion on deployments using the PHP built-in server or certain non-default Nginx configurations. A flaw was found in Cockpit CMS. This vulnerability, a path traversal and local file inclusion, all

CVE-2026-58467: Cockpit CMS through 2.14.0 contains a path traversal and local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files or…

Affected

CVSS provenance