Vulnerability Description
Cockpit CMS contains a missing authorization vulnerability in the Bucket file storage API (/system/buckets/api). The api() method in modules/System/Controller/Buckets.php executes bucket commands (ls, upload, removefiles, rename, createfolder) without performing any ACL or role check. Any authenticated user, regardless of role, can perform all bucket operations on any named bucket, including buckets intended for admin use only.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://gist.github.com/sermikr0/821c4edd3c34e98a62a50b07707785bd
- https://github.com/Cockpit-HQ/Cockpit/commit/dde2d1d74f5f4e11de42a298918ea8c9684
- https://github.com/cockpit-hq/cockpit
- https://www.vulncheck.com/advisories/cockpit-cms-missing-authorization-in-bucket
- https://gist.github.com/sermikr0/821c4edd3c34e98a62a50b07707785bd
FAQ
What is CVE-2026-57855?
CVE-2026-57855 is a vulnerability with a CVSS score of 8.8 (HIGH). Cockpit CMS contains a missing authorization vulnerability in the Bucket file storage API (/system/buckets/api). The api() method in modules/System/Controller/Buckets.php executes bucket commands (ls,...
How severe is CVE-2026-57855?
CVE-2026-57855 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-57855?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.