A flaw was found in PCS (Pacemaker Configuration System). A local attacker with membership in the 'haclient' group can exploit the 'pcs host auth --token' command to read the contents of arbitrary files on the filesystem, provided the files are shorter than 256 bytes. The file contents are read with root privileges by the pcsd daemon and can be exfiltrated by the attacker through subsequent cluster node communication. This allows disclosure of sensitive data such as API keys, tokens, or configuration secrets that would otherwise be inaccessible to the attacker.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ee77e0c099 advisory.

    - Rebased pcs to the newest major version (see CHANGELOG.md) - includes fix for CVE-2026-84828
    - Updated standalone web UI and HA Cluster Management Cockpit application to pcs-web-ui 0.1.25 (see     CHANGELOG_WUI.md)
    - pcs no longer depends on rubygems ethon and ffi, rubygem curb is used instead

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-96efddc493 advisory.

    - Rebased pcs to the newest major version (see CHANGELOG.md) - includes fix for CVE-2026-84828
    - Updated standalone web UI and HA Cluster Management Cockpit application to pcs-web-ui 0.1.25 (see     CHANGELOG_WUI.md)
    - pcs no longer depends on rubygems ethon and ffi, rubygem curb is used instead

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in PCS (Pacemaker Configuration System). A local attacker with membership in the     'haclient' group can exploit the 'pcs host auth --token' command to read the contents of arbitrary files     on the filesystem, provided the files are shorter than 256 bytes. The file contents are read with root     privileges by the pcsd daemon and can be exfiltrated by the attacker through subsequent cluster node     communication. This allows disclosure of sensitive data such as API keys, tokens, or configuration secrets     that would otherwise be inaccessible to the attacker. (CVE-2026-84828)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
350082	Fedora 44 : pcs (2026-ee77e0c099)	Nessus	Fedora Local Security Checks	Local	medium
349924	Fedora 43 : pcs (2026-96efddc493)	Nessus	Fedora Local Security Checks	Local	medium
344593	Linux Distros Unpatched Vulnerability : CVE-2026-84828	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-84828

medium

Tenable Plugins

medium

medium

medium