Medium severity4.3NVD Advisory· Published Jun 1, 2026· Updated Jul 22, 2026
CVE-2026-10294
CVE-2026-10294
Description
A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function g_file_test of the file src/pk-transaction.c of the component API. Such manipulation of the argument frontend-socket leads to improper authorization. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: <=1.3.5
- osv-coords2 versionspkg:rpm/opensuse/PackageKit&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/PackageKit&distro=openSUSE%20Tumbleweed
< 1.2.8-160000.5.1+ 1 more
- (no CPE)range: < 1.2.8-160000.5.1
- (no CPE)range: < 1.3.6-1.1
Patches
Vulnerability mechanics
References
5News mentions
0No linked articles in our index yet.