g_file_test of the file src/pk-transaction.c of the component API. Such manipulation of the argument frontend-socket leads to improper authorization.
This vulnerability is documented as CVE-2026-10294. The attack can be executed remotely. Additionally, an exploit exists.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2026-10294 | PackageKit up to 1.3.5 API src/pk-transaction.c g_file_test frontend-socket improper authorization (Issue 969 / EUVD-2026-33818)
A vulnerability, which was classified as problematic, was found in PackageKit up to 1.3.5. Affected is the function
SOCIAL SHARE CARD GENERATOR