rhc vulnerabilities

CVEs whose affected-version data names the rhc package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-112210Medium· 6.0

yesterday

Rhc: rhc: local privilege escalation via symlink following in rhc-canonical-facts.service

A flaw was found in the rhc-canonical-facts.service systemd unit shipped with rhc. The service runs as root and operates on a file inside a directory owned by an unprivileged system user without verifying that the file is not a symbolic …

▾ SunlitRed Hat · rhcvia CVEORG