VYPR

dnf5daemon-server

by Red Hat

CVEs (1)

  • CVE-2026-111253MedNov 5, 2026
    risk 0.36cvss 6.6epss —

    A flaw was found in dnf5daemon-server. Session methods on dynamically exported D-Bus session objects do not verify that the caller is the unique sender that created the session. A local attacker can modify another user's live package-management session and replace its resolved…