RHSA-2026:98530: Important: xdg-dbus-proxy security update
xdg-dbus-proxy is a filtering proxy for D-Bus connections. It was originally part of the flatpak project, but it has been broken out as a standalone module to facilitate using it in other contexts.Security Fix(es): xdg-dbus-proxy: xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape (CVE-2026-94422) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/xdg-dbus-proxyto a version that resolves this vulnerability.Fixed in 0.1.3-1.el9_9.1 - Upgrade
Upgrade
redhat/xdg-dbus-proxy-debuginfoto a version that resolves this vulnerability.Fixed in 0.1.3-1.el9_9.1 - Upgrade
Upgrade
redhat/xdg-dbus-proxy-debugsourceto a version that resolves this vulnerability.Fixed in 0.1.3-1.el9_9.1 - Upgrade
Upgrade
redhat/xdg-dbus-proxyto a version that resolves this vulnerability.Fixed in 0.1.3-1.el9_9.1.aa - Upgrade
Upgrade
redhat/xdg-dbus-proxy-debuginfoto a version that resolves this vulnerability.Fixed in 0.1.3-1.el9_9.1.aa - Upgrade
Upgrade
redhat/xdg-dbus-proxy-debugsourceto a version that resolves this vulnerability.Fixed in 0.1.3-1.el9_9.1.aa
Event History
Frequently Asked Questions
What kind of environments are at risk from this issue?
Environments that use xdg-dbus-proxy to filter D-Bus connections are relevant. The reported impact is a sandbox escape through a message-filtering bypass.
What capability does an attacker need to exploit the vulnerability?
The available information identifies a bypass involving a reply serial in D-Bus message filtering. It does not state any additional prerequisites, such as authentication requirements or required local access.
Which Red Hat packages are included in this update?
The advisory lists redhat/xdg-dbus-proxy, redhat/xdg-dbus-proxy-debuginfo, and redhat/xdg-dbus-proxy-debugsource.
What should be done if systems use xdg-dbus-proxy for sandbox isolation?
Apply RHSA-2026:98530 to obtain the security update. The provided information does not describe a workaround or configuration-based mitigation.