A vulnerability was found in Cockpit up to 2.13.5. It has been classified as critical. The impacted element is an unknown function of the component Buckets. This manipulation causes path traversal.
The identification of this vulnerability is CVE-2026-38993. It is possible to initiate the attack remotely. There is no exploit available.
