What is GHSA-fm6c-rhcf-7439?

GHSA-fm6c-rhcf-7439 is a security advisory published by GitHub Security Advisories with Critical severity. Cockpit is vulnerable to arbitrary code execution

Which CVE IDs does GHSA-fm6c-rhcf-7439 cover?

GHSA-fm6c-rhcf-7439 covers the following CVE IDs: CVE-2026-38992. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-fm6c-rhcf-7439?

GHSA-fm6c-rhcf-7439 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-fm6c-rhcf-7439?

GHSA-fm6c-rhcf-7439 affects 1 product, including: composer/cockpit-hq/cockpit:\u003c 2.14.0.

GHSA-fm6c-rhcf-7439CriticalCVSS 9.8

Cockpit is vulnerable to arbitrary code execution

Vendor

GitHub Security Advisories

Published

April 29, 2026

Last Modified

May 6, 2026

🔗 CVE IDs covered (1)

CVE-2026-38992 →

📋 Description

Cockpit versions 2.13.5 and earlier are vulnerable to arbitrary code execution via the filter parameter within multiple endpoints. This vulnerability allows an attacker to run system commands on the underlying infrastructure via the MongoLite $func operator.

🎯 Affected products1

composer/cockpit-hq/cockpit:< 2.14.0

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-38992
https://felsec.com/posts/cockpit-cms-2.13.5-multi-vulns
https://github.com/Cockpit-HQ/Cockpit/releases/tag/2.14.0
https://github.com/advisories/GHSA-fm6c-rhcf-7439