Skip to content
Fencer Vulns
medium 4.7

CVE-2026-15060 json

systemd-machined: unprivileged users can terminate arbitrary processes

published 2026-08-10 2 mo ago modified 2026-10-23 16 d ago also EUVD-2026-55627

cvss
4.7
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.1%
EPSS 0.1% chance of exploitation in 30 days, percentile 0%
public exploits
0
none known

Summary

When systemd-machined >= v259 (or v258 with a custom `polkit` policy that allows `register-machine` access) is running on a desktop system, an unprivileged user logged in a desktop graphical session can kill arbitrary processes, even privileged ones.

- versions older than v259 are not affected, unless unprivileged access is granted for the `register-machine` polkit action via a local, custom policy config file - versions older than v258 are not affected - unrelated to the systemd service manager (pid 1 or user session managers) - systemd-machined is not typically installed by default, and is typically in an optional, separate package (e.g.: systemd-container) - terminal-only or remote sessions (e.g.: ssh) are not affected

Patch / fix

  • systemd systemd-machined 262, 261.2, 260.4, 259.8, 258.10
  • systemd Debian 14 261.2-1

debian advisories DEBIAN-CVE-2026-15060

  • systemd Ubuntu 26.04 LTS 259.5-0ubuntu3.4

ubuntu advisories UBUNTU-CVE-2026-15060

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2026-15060 updated cvss 4.7

systemd-machined: systemd-machined: Unprivileged users can terminate arbitrary processes

  • Red Hat Enterprise Linux 7 systemd, libgudev1, systemd-libs, systemd-sysv, NetworkManager, systemd-python, +16 more Red Hat Enterprise Linux 8 systemd, systemd-pam, systemd-libs, systemd-udev, systemd-tests, NetworkManager, +16 more Red Hat Enterprise Linux 9 systemd, systemd-pam, systemd-libs, systemd-oomd, systemd-udev, systemd-ukify, +21 more Red Hat Enterprise Linux 10 systemd, rpm-ostree, NetworkManager Red Hat Hardened Images systemd Red Hat OpenShift Container Platform 4 systemd, systemd-pam, systemd-libs, systemd-oomd, systemd-udev, systemd-tests, +24 more
    +1 more products
    Red Hat OpenShift Container Platform 5 openshift/ose-rhel-coreos-9
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
2 mo ago

Exploit prediction

0.08% chance of exploitation in the next 30 days, higher than 0% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

  • systemd systemd-machined

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.