CVE-2026-96424

1th percentile - higher than 1% of all known CVEs

Incorrect DBus policy for lomiri-upload-manager (part of lomiri-download-manager) allows an arbitrary user to read arbitrary files as root over DBus.

An attacker can read arbitrary files with root privileges, leading to disclosure of sensitive system data. The risk includes privilege escalation and confidentiality breach.

Update lomiri-download-manager to a version containing the DBus policy fix. Restrict access to the lomiri-upload-manager DBus service and verify DBus policies on the system.