Red Hat Security Advisory

RHSA-2026:91625

xdg-dbus-proxy security update

Released 2026-10-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.9.6) xdg-dbus-proxy-0.1.3-1.el9_6.1

Fixes 1 record

TI-2026-65935 CVE-2026-94422

xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape

MEDIUM 40

An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply…

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00497 Published 2026-10-02 Fixed in 0.1.9 CWE-290