CVE-2026-6855: Red Hat Enterprise Linux Ai
High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.
A flaw was found in InstructLab. A local attacker could exploit a path traversal vulnerability in the chat session handler by manipulating the `logs_dir` parameter. This allows the attacker to create new directories and write files to arbitrary locations on the system, potentially leading to unauthorized data modification or disclosure.
Affected products
Published 2026-04-22. Last modified 2026-06-17.