diff --git a/src/system/kernel/fs/vfs.cpp b/src/system/kernel/fs/vfs.cpp
index eee6eb6749..eb1532ca5c 100644
--- a/src/system/kernel/fs/vfs.cpp
+++ b/src/system/kernel/fs/vfs.cpp
@@ -6346,6 +6346,10 @@ _user_get_next_fd_info(team_id team, uint32 *userCookie, fd_info *userInfo,
 	struct fd_info info;
 	uint32 cookie;
 
+	// only root can do this (or should root's group be enough?)
+	if (geteuid() != 0)
+		return B_NOT_ALLOWED;
+
 	if (infoSize != sizeof(fd_info))
 		return B_BAD_VALUE;