A Skipped Cookie Check Let Flatpak Apps Escape PipeWire’s Sandbox Entirely
CVE-2026-5674 chains a broken PulseAudio auth check, default module loading, and an unrestricted dlopen() into a full PipeWire sandbox escape from inside Flatpak apps like Discord.
A Skipped Cookie Check Let Flatpak Apps Escape PipeWire’s Sandbox Entirely on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses.
from Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses https://ift.tt/i2nAbrJ
via IFTTT
A Skipped Cookie Check Let Flatpak Apps Escape PipeWire’s Sandbox Entirely
![A Skipped Cookie Check Let Flatpak Apps Escape PipeWire’s Sandbox Entirely]()
Reviewed by Divyansh Saxena
on
August 02, 2026
Rating:
No comments: