CVE-2026-38991 | Cockpit up to 2.13.5 Bucket _isFileTypeAllowed access control

A vulnerability, which was classified as critical, was found in Cockpit up to 2.13.5. This issue affects the function _isFileTypeAllowed of the component Bucket. Executing a manipulation can lead to improper access controls.

This vulnerability is handled as CVE-2026-38991. The attack can be executed remotely. There is not any exploit available.