CVE-2025-27512

Zincati is an auto-update agent for Fedora CoreOS hosts. Zincati ships a polkit rule which allows the "zincati" system user to use the actions "org.projectatomic.rpmostree1.deploy" to deploy updates to the system and "org.projectatomic.rpmostree1.finalize-deployment" to reboot the system into the...