Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.8
Cloud-init for Red Hat Linux: Unauthorized File Access Risk
published 1 year ago
Summary
A security update is available for cloud-init, a tool used to configure and customize cloud instances. If left unpatched, an attacker could potentially access sensitive files on your system. To protect your system, apply the latest security update as soon as possible.
What to do
- Update redhat cloud-init to version 0:22.1-10.el9_2.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:rhel_e4s:9.2::appstream | redhat | cloud-init |
< 0:22.1-10.el9_2.1 Fix: upgrade to 0:22.1-10.el9_2.1
|
Original advisory text
Red Hat Security Advisory: cloud-init security update
References
- https://access.redhat.com/errata/RHSA-2025:10879 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#important Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2374924 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10879.... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2024-6174 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-6174 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-6174 Vendor Advisory
- https://github.com/canonical/cloud-init/commit/e3f42adc2674a38fb29e414cfbf96f884... Third Party Advisory
- https://github.com/canonical/cloud-init/releases/tag/25.1.3 Third Party Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published15 Jul 2025
Updated12 Jul 2026
First seen12 Jul 2026
Sources
RHSA-2025:10879 · OSV
Track software like this
Free during beta