CVE Catalog

CVE-2026-96425

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.11%

1th percentile - higher than 1% of all known CVEs

Summary

Incorrect DBus policy for lomiri-download-manager allows an arbitrary user to run arbitrary commands as root over DBus.

Risk Assessment

Any local user can gain root privileges, leading to full system compromise.

Recommendation

Fix the DBus policy in lomiri-download-manager to prevent unprivileged users from invoking commands as root.

Other vulnerabilities in lomiri-download-manager

Original NVD description (English source)

Incorrect DBus policy for lomiri-download-manager allows arbitrary user to run arbitrary command as root over DBus

Vulnerability data from NVD (NIST) · CISA KEV · EPSS