CVE-2026-113496

A vulnerability exists in cockpit-machines where VNC console passwords are disclosed via command-line arguments. When saving settings, the software passes the password directly to an underlying system utility. A local unprivileged attacker capable of cross-user process inspection can read this pa...