Read the docs
TI-2026-75362 Aliases CVE-2026-96425GHSA-xrrp-gpj2-96j9

Incorrect DBus policy in lomiri-download-manager allows root access

Priority LOW 24CWE-732Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

UBports lomiri-download-manager from 0.1.0 before 0.3.3 has an incorrect DBus policy (CWE-732). A local user with low privileges can run an arbitrary command as root over DBus, without any user interaction.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Description from the CNA

Incorrect DBus policy for lomiri-download-manager allows arbitrary user to run arbitrary command as root over DBus

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00105 1st percentileScored 2026-11-07
Fix Fixed lomiri-download-manager (UBports): 0.3.3

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
UBportslomiri-download-manager0.1.0 to before 0.3.30.3.3Patch availableCNA
  • lomiri-download-manager VendorUBports Affected 0.1.0 to before 0.3.3 Fixed in 0.3.3 Patch available CNA

Remediation

Upgrade UBports lomiri-download-manager to 0.3.3, the first fixed version.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

  • Fix · CNA lomiri-download-manager (UBports) Fixed in 0.3.3

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    UBports lomiri-download-manager 0.3.3

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2026-75361 Incorrect Permission Assignment for Critical Resource in lomiri-download-managerPriority LOW 35
    Show all 2 records →

Timeline

  1. 2026-10-16 Threatist record created from CVE-2026-96425
  2. 2026-10-16 Alias added: GHSA-xrrp-gpj2-96j9
  3. 2026-10-18 CISA SSVC decision points changed
  4. 2026-10-18 Priority changed: MEDIUM → LOW

References

Other 4

  • TI-2022-19135 UBports Ubuntu Touch 16.04 allows the screen-unlock passcode to be used for a privileged… CVSS 3.1HIGH 7.8
  • TI-2026-75361 Incorrect Permission Assignment for Critical Resource in lomiri-download-manager CVSS 3.1HIGH 7.8
  • TI-2016-01434 Using a specially crafted fallback art property, scopes can execute arbitrary QML code in context of unity8-dash CVSS 3.1HIGH 7.8
  • TI-2015-06612 MTP service exposed during emergency dialer CVSS 3.1HIGH 7.3
  • TI-2014-01101 Online Accounts Signon daemon gives out all oauth tokens to any app CVSS 3.1MEDIUM 5.9

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences