Nixpkgs security tracker

Try the new UI
Login with GitHub

Suggestions search

With package: vpcs

Found 1 matching suggestions

View:
Compact
Detailed
Permalink CVE-2026-84828
6.5 MEDIUM
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): Low (L)
  • User Interaction (UI): None (N)
  • Scope (S): Changed (C)
  • Confidentiality (C): High (H)
  • Integrity (I): None (N)
  • Availability (A): None (N)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): Low (L)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): High (H)
  • Modified Scope (MS): Changed (C)
  • Modified Integrity (MI): None (N)
  • Modified Availability (MA): None (N)
created 1 week, 4 days ago Activity log
  • Created suggestion
Pcs: pcs: non-root haclient users can read arbitrary files via pcs host auth --token

A flaw was found in PCS (Pacemaker Configuration System). A local attacker with membership in the 'haclient' group can exploit the 'pcs host auth --token' command to read the contents of arbitrary files on the filesystem, provided the files are shorter than 256 bytes. The file contents are read with root privileges by the pcsd daemon and can be exfiltrated by the attacker through subsequent cluster node communication. This allows disclosure of sensitive data such as API keys, tokens, or configuration secrets that would otherwise be inaccessible to the attacker.

Affected products

pcs
rhosp-rhel9/openstack-frr
rhosp-rhel8/openstack-base
openshift/ose-rhel-coreos-9

Matching in nixpkgs

pkgs.vpcs

Simple virtual PC simulator

  • nixos-unstable -
    • nixos-unstable-small 0.8.4
  • nixos-26.05 -
    • nixos-26.05-small 0.8.3

pkgs.pcsx2

Playstation 2 emulator

  • nixos-unstable -
    • nixos-unstable-small 2.8.2
  • nixos-26.05 -
    • nixos-26.05-small 2.6.3

pkgs.pcstat

Page Cache stat: get page cache stats for files on Linux

  • nixos-unstable -
    • nixos-unstable-small 0.0.2
  • nixos-26.05 -
    • nixos-26.05-small 0.0.2

pkgs.pcsclite

Middleware to access a smart card using SCard API (PC/SC)

  • nixos-unstable -
    • nixos-unstable-small 2.4.1
  • nixos-26.05 -
    • nixos-26.05-small 2.4.1

pkgs.appcsxcad

Minimal Application using the QCSXCAD library

  • nixos-unstable -
    • nixos-unstable-small 0.2.3
  • nixos-26.05 -
    • nixos-26.05-small 0.2.3

pkgs.pcsc-tools

Tools used to test a PC/SC driver, card or reader

  • nixos-unstable -
    • nixos-unstable-small 1.7.5
  • nixos-26.05 -
    • nixos-26.05-small 1.7.4

pkgs.baidupcs-go

Baidu Netdisk commandline client, mimicking Linux shell file handling commands

  • nixos-unstable -
    • nixos-unstable-small 4.0.2
  • nixos-26.05 -
    • nixos-26.05-small 4.0.1

pkgs.rpcsvc-proto

This package contains rpcsvc proto.x files from glibc, which are missing in libtirpc

  • nixos-unstable -
    • nixos-unstable-small 1.4.4
  • nixos-26.05 -
    • nixos-26.05-small 1.4.4

pkgs.pcsc-cyberjack

REINER SCT cyberJack USB chipcard reader user space driver

  • nixos-unstable -
  • nixos-26.05 -

pkgs.pcsc-scm-scl011

SCM Microsystems SCL011 chipcard reader user space driver

  • nixos-unstable -
    • nixos-unstable-small 2.09
  • nixos-26.05 -
    • nixos-26.05-small 2.09

pkgs.pcscliteWithPolkit

Middleware to access a smart card using SCard API (PC/SC)

  • nixos-unstable -
    • nixos-unstable-small 2.4.1
  • nixos-26.05 -
    • nixos-26.05-small 2.4.1

pkgs.pkgsRocm.appcsxcad

Minimal Application using the QCSXCAD library

  • nixos-unstable -
    • nixos-unstable-small 0.2.3
  • nixos-26.05 -
    • nixos-26.05-small 0.2.3

pkgs.vsmartcard-pcsc-relay

Relays a smart card using an contact-less interface

  • nixos-unstable -
    • nixos-unstable-small 0.10
  • nixos-26.05 -
    • nixos-26.05-small 0.10