medium4.3
CVE-2026-10294
A vulnerability has been found in PackageKit up to 1.3.5.
Impact
A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function g_file_test of the file src/pk-transaction.c of the component API. Such manipulation of the argument frontend-socket leads to improper authorization. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Product | Affected versions |
|---|---|
| PackageKit | before 1.3.5. |
Versions were read from the advisory text. No structured product data has been published for this record yet.