TI-2026-54528 CVE-2026-78422 · GHSA-j48v-cvqq-xcv6
zbus_polkit: polkit authorization bypass via PID reuse due to incorrect D-Bus type for the subject UID
Priority LOW 33
Subject::new_for_owner() in the zbus_polkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer (D-Bus type u), whereas the org.freedesktop.PolicyKit1.Authority interface specifies…