rootpwn

high · CVSS v3 8.8 · CVSS v4 8.7

CVE-2026-94422

An incorrect message filtering implementation in xdg-dbus-proxy allows bypassing D-Bus session bus filters by setting a reply serial number

Overview

An incorrect message filtering implementation in xdg-dbus-proxy allows bypassing D-Bus session bus filters by setting a reply serial number on non-reply messages. This flaw can be exploited by a malicious or compromised Flatpak app to execute code outside its sandbox. The vulnerability affects systems using xdg-dbus-proxy before version 0.1.9.

Description

An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve arbitrary code execution outside its sandbox. xdg-dbus-proxy was designed to be part of the sandbox boundary for Flatpak, but it is released as a separate project and is sometimes used by other app frameworks such as Firejail.

Impact

Confidentiality: attackers can read or modify inter-process messages. Integrity: they can alter or inject messages, leading to arbitrary code execution. Availability: potential denial of service by exhausting resources. Defenders include users of Flatpak, Firejail, and any distribution bundling vulnerable xdg-dbus-proxy.

Remediation

Upgrade xdg-dbus-proxy to version 0.1.9 or later. For distributions, apply the vendor’s security update or rebuild the package with the patched source. Disable or restrict D-Bus message filtering for untrusted apps, and enforce strict sandbox boundaries in Flatpak or Firejail configurations.

Risk context

Severity is high with CVSS v3 score 8.8 and v4 score 8.7. No EPSS data is available, but the flaw permits arbitrary code execution, making it a critical issue for affected systems.

Affected products

  • xdg-dbus-proxy
  • Flatpak
  • Firejail
  • Linux D-Bus
  • Ubuntu
  • Fedora
  • Debian
  • CentOS

Scores

Severity
high
CVSS v2
7.5
CVSS v3
8.8
CVSS v4
8.7
EPSS
—

xdg-dbus-proxy Flatpak sandbox D-Bus high severity CVE-2026-94422 code execution privilege escalation

← All CVEs

Related CVEs

high

CVE-2026-104912

MISP before v2.5.48 has an authorization flaw in correlation handling during attribute searches. Correlated attributes and events can be authorized using a stale distribution snapshot instead of the live event access control list. This matters because restricted or unpublished events may remain visible to authenticated users who no longer have permission.

View analysis

high

CVE-2026-94544

CVE-2026-94544 exposes a cache sharing flaw in Next.js 16.3.0‑16.3.8 that allows unauthenticated users to see unpublished draft content or see published content in draft mode. The vulnerability arises when Cache Components or experimental.useCache are enabled and cached functions return draft‑dependent data. It can lead to accidental disclosure of sensitive content on public sites.

View analysis

high

CVE-2026-96270

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form_id' parameter in all versions up to, and including, 2.13.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The injected payload is stored in the registering user's 'submitted' usermeta via update_user_meta() and is only triggered when an administrator opens the affected user record in the wp-admin Users modal, which inserts the unescaped output via jQuery .html().

View analysis

high

CVE-2026-92977

The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and including, 5.3.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Malicious script payloads placed in the title attribute of an anchor tag survive WordPress's comment kses filter at save time, as the payload is only promoted to executable HTML attributes when the plugin's page-wide regex strips the closing quote delimiter at render time; exploitability is therefore subject to the standard comment moderation workflow before the comment is publicly displayed.

View analysis