The flaw in the cockpit‑ws component allows a remote, unauthenticated attacker to trigger a DoS by sending a specially crafted request. When the WebService.UrlRoot is configured and the attacker requests the exact URL‑root prefix without a trailing slash, cockpit‑ws terminates unexpectedly, rendering the Cockpit web service unavailable. No privilege escalation or data compromise is involved, but the service being unreachable may disrupt system management and operations.

Red Hat Enterprise Linux versions 7 through 10 and Red Hat OpenShift Dev Spaces version 3 are affected. The vulnerability is tied to the cockpit‑ws component, which is part of the Cockpit web interface used for system administration.

The CVSS score of 5.9 indicates a moderate level of severity. EPSS is not available, and the vulnerability is not listed in CISA’s KEV catalog. Attackers can exploit the flaw from any remote host that can reach the Cockpit service without authentication. Because the attack only requires crafting a specific URL request, the likelihood of exploitation is relatively high in exposed environments, warranting prompt remediation.