CVE-2026-93676
LowCVSS 3.2Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
xdg-dbus-proxy incorrectly filters D-Bus broadcast messages, bypassing configured path, interface, and member restrictions. This allows a sandboxed Flatpak application to intercept broadcast signals on the D-Bus session bus and AT-SPI bus that should be restricted.
Risk Assessment
This may lead to sensitive information exposure to unauthorized applications within the sandbox, undermining isolation and data security. Applications able to intercept signals may gain insight into other applications' data.
Recommendation
Update xdg-dbus-proxy to a version containing the fix. Until then, consider limiting the execution of untrusted Flatpak applications.
Other vulnerabilities in xdg-dbus-proxy
See all- CVE-2026-94422High
xdg-dbus-proxy before version 0.1.9 has an incorrect implementation of message filtering that allows an attacker to bypass intended filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve arbitrary code execution outside its sandbox.
- CVE-2026-34080Medium
xdg-dbus-proxy before version 0.1.7 has a policy parser vulnerability that allows bypassing eavesdrop restrictions. The proxy mishandles cases like 'eavesdrop ='true'' (with a space before the equals sign), enabling clients to intercept D-Bus messages they should not have access to.
Original NVD description (English source)
xdg-dbus-proxy incorrectly filters D-Bus broadcast messages, bypassing configured path, interface, and member restrictions. This allows a sandboxed Flatpak application to intercept broadcast signals on the D-Bus session bus and AT-SPI bus that should be restricted, potentially exposing sensitive information to unauthorized applications.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS