Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.9
Red Hat OpenShell packages could allow privilege escalation
published 25 days ago
Summary
The OpenShell, OpenShell Gateway, and Python3-OpenShell packages from Red Hat contain a flaw that could let a malicious user gain higher system privileges. This can lead to unauthorized access or control over the server. Install the latest Red Hat Hardened Images update as soon as possible to close the gap.
What to do
- Update redhat openshell to version 0:0.0.116-0.2.hum1.
- Update redhat openshell-gateway to version 0:0.0.116-0.2.hum1.
- Update redhat python3-openshell to version 0:0.0.116-0.2.hum1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:hummingbird:1 | redhat | openshell |
< 0:0.0.116-0.2.hum1 Fix: upgrade to 0:0.0.116-0.2.hum1
|
| Red Hat:hummingbird:1 | redhat | openshell-gateway |
< 0:0.0.116-0.2.hum1 Fix: upgrade to 0:0.0.116-0.2.hum1
|
| Red Hat:hummingbird:1 | redhat | python3-openshell |
< 0:0.0.116-0.2.hum1 Fix: upgrade to 0:0.0.116-0.2.hum1
|
Original advisory text
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
References
- https://access.redhat.com/errata/RHSA-2026:70694 Vendor Advisory
- https://images.redhat.com/ Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-93599 Third Party Advisory
- https://access.redhat.com/security/updates/classification/ Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-65083 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-65093 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_70694.... Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2523921 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-65083 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-65083 Vendor Advisory
- https://github.com/NVIDIA/product-security/tree/main/2026/5872 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2523843 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-65093 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-65093 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2538431 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-93599 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-93599 Vendor Advisory
- https://github.com/rustls/webpki/security/advisories/GHSA-82j2-j2ch-gfr8 Third Party Advisory
- https://www.vulncheck.com/advisories/rustls-webpki-before-0.103.13-panic-via-emp... Third Party Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Severity
9.9
Critical
Timeline
Published24 Sep 2026
Updated30 Sep 2026
First seen24 Sep 2026
Sources
RHSA-2026:70694 · OSV
Track software like this
Free during beta