Vulnerabilityhigh
xdg-dbus-proxy 0.1.9 fixes sandbox escape CVE-2026-94422
AI summary · grok-4.7Summaries by Vani AI
xdg-dbus-proxy 0.1.9 patches sandbox escape CVE-2026-94422; every older release is vulnerable.
Simon McVittie announced on oss-security that xdg-dbus-proxy 0.1.9 fixes CVE-2026-94422, a sandbox escape. All versions older than 0.1.9 are vulnerable. The fix is documented in GitHub advisory GHSA-2cgv-pwcq-wvpq and the 0.1.9 release notes. The notice does not report active exploitation.
Key facts
- CVE-2026-94422 is a sandbox escape in xdg-dbus-proxy.
- Version 0.1.9 fixes it; every older release is vulnerable.
- The GitHub advisory is GHSA-2cgv-pwcq-wvpq.
- The notice does not report active exploitation.
- CVEs
- CVE-2026-94422
- Vendors
- Flatpak
- Products
- xdg-dbus-proxy
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-94422 | D-Bus filter bypass sandbox escape in xdg-dbus-proxy | 8.7 | — |
From the original article
Posted by Simon McVittie on Sep 23 xdg-dbus-proxy 0. 1. 9 fixes a security vulnerability, CVE-2026-94422: https://github.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.