SUSE-SU-2026:5141-1: Security update for PackageKit

Q: Who can exploit this issue?

Any local user can exploit the missing authorization check. The issue is a local privilege-escalation vulnerability, so it requires access to the affected system rather than being described as remotely exploitable.

Q: What action triggers the vulnerability?

The vulnerable path is calling PackageKit's InstallFiles operation with the SIMULATE flag. In the affected behavior, that operation can be invoked without a polkit check.

Q: Which components should be updated?

The advisory lists PackageKit and related components, including libpackagekit-glib2, packagekit-backend-zypp, typelib, development packages, and debuginfo packages. Update the PackageKit packages supplied for the affected SUSE system.

Published Nov 9, 2026

Updated

This update for PackageKit fixes the following issue:

- CVE-2026-104620: local privilege escalation by any local user can call InstallFiles with the SIMULATE flag without a polkit check (bsc#1284954).

Other sources

This update for PackageKit fixes the following issue: CVE-2026-104620: local privilege escalation by any local user can call InstallFiles with the SIMULATE flag without a polkit check (bsc#1284954).

— SUSE

Affected Software

30 affected componentsFixes available

suse/packagekit<1.1.3-24.29.1

1.1.3-24.29.1

suse/packagekit<1.1.3-24.29.1

1.1.3-24.29.1

All of the following

SUSE SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64)

Any of the following

suse/libpackagekit-glib2-devel<1.1.3-24.29.1

1.1.3-24.29.1

suse/packagekit-backend-zypp<1.1.3-24.29.1

1.1.3-24.29.1

suse/typelib<1_0-PackageKitGlib-1_0-1.1.3-24.29.1

1_0-PackageKitGlib-1_0-1.1.3-24.29.1

suse/libpackagekit-glib2<18-1.1.3-24.29.1

18-1.1.3-24.29.1

suse/packagekit-backend-zypp-debuginfo<1.1.3-24.29.1

1.1.3-24.29.1

suse/libpackagekit-glib2<18-debuginfo-1.1.3-24.29.1

18-debuginfo-1.1.3-24.29.1

suse/packagekit<1.1.3-24.29.1

1.1.3-24.29.1

suse/packagekit-debuginfo<1.1.3-24.29.1

1.1.3-24.29.1

suse/packagekit-devel<1.1.3-24.29.1

1.1.3-24.29.1

suse/packagekit-devel-debuginfo<1.1.3-24.29.1

1.1.3-24.29.1

suse/packagekit-debugsource<1.1.3-24.29.1

1.1.3-24.29.1

All of the following

SUSE SUSE Linux Enterprise Server 12 SP5 LTSS (noarch)

suse/packagekit-lang<1.1.3-24.29.1

1.1.3-24.29.1

All of the following

SUSE SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64)

Any of the following

suse/libpackagekit-glib2-devel<1.1.3-24.29.1

1.1.3-24.29.1

suse/packagekit-backend-zypp<1.1.3-24.29.1

1.1.3-24.29.1

suse/typelib<1_0-PackageKitGlib-1_0-1.1.3-24.29.1

1_0-PackageKitGlib-1_0-1.1.3-24.29.1

suse/libpackagekit-glib2<18-1.1.3-24.29.1

18-1.1.3-24.29.1

suse/packagekit-backend-zypp-debuginfo<1.1.3-24.29.1

1.1.3-24.29.1

suse/libpackagekit-glib2<18-debuginfo-1.1.3-24.29.1

18-debuginfo-1.1.3-24.29.1

suse/packagekit<1.1.3-24.29.1

1.1.3-24.29.1

suse/packagekit-debuginfo<1.1.3-24.29.1

1.1.3-24.29.1

suse/packagekit-devel<1.1.3-24.29.1

1.1.3-24.29.1

suse/packagekit-devel-debuginfo<1.1.3-24.29.1

1.1.3-24.29.1

suse/packagekit-debugsource<1.1.3-24.29.1

1.1.3-24.29.1

All of the following

SUSE SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch)

suse/packagekit-lang<1.1.3-24.29.1

1.1.3-24.29.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade suse/PackageKit to a version that resolves this vulnerability.
Fixed in 1.1.3-24.29.1
Upgrade
Upgrade suse/libpackagekit-glib2-devel to a version that resolves this vulnerability.
Fixed in 1.1.3-24.29.1
Upgrade
Upgrade suse/PackageKit-backend-zypp to a version that resolves this vulnerability.
Fixed in 1.1.3-24.29.1
Upgrade
Upgrade suse/typelib to a version that resolves this vulnerability.
Fixed in 1_0-PackageKitGlib-1_0-1.1.3-24.29.1
Upgrade
Upgrade suse/libpackagekit-glib2 to a version that resolves this vulnerability.
Fixed in 18-1.1.3-24.29.1
Upgrade
Upgrade suse/PackageKit-backend-zypp-debuginfo to a version that resolves this vulnerability.
Fixed in 1.1.3-24.29.1
Upgrade
Upgrade suse/libpackagekit-glib2 to a version that resolves this vulnerability.
Fixed in 18-debuginfo-1.1.3-24.29.1
Upgrade
Upgrade suse/PackageKit-debuginfo to a version that resolves this vulnerability.
Fixed in 1.1.3-24.29.1
Upgrade
Upgrade suse/PackageKit-devel to a version that resolves this vulnerability.
Fixed in 1.1.3-24.29.1
Upgrade
Upgrade suse/PackageKit-devel-debuginfo to a version that resolves this vulnerability.
Fixed in 1.1.3-24.29.1
Upgrade
Upgrade suse/PackageKit-debugsource to a version that resolves this vulnerability.
Fixed in 1.1.3-24.29.1
Upgrade
Upgrade suse/PackageKit-lang to a version that resolves this vulnerability.
Fixed in 1.1.3-24.29.1
Upgrade
Upgrade PackageKit to a version that resolves this vulnerability.
Patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-5141
Upgrade
Upgrade PackageKit to a version that resolves this vulnerability.
Patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-5141

Event History

Nov 9, 2026

Advisory Published

via OSV·01:32 PM

Data Sourced

via OSV·01:32 PM

DescriptionAffected Software

Advisory Published

via SUSE·01:32 PM

Data Sourced

via SUSE·01:32 PM

RemedyDescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-104620

Frequently Asked Questions

Who can exploit this issue?

Any local user can exploit the missing authorization check. The issue is a local privilege-escalation vulnerability, so it requires access to the affected system rather than being described as remotely exploitable.

What action triggers the vulnerability?

The vulnerable path is calling PackageKit's InstallFiles operation with the SIMULATE flag. In the affected behavior, that operation can be invoked without a polkit check.

Which components should be updated?

The advisory lists PackageKit and related components, including libpackagekit-glib2, packagekit-backend-zypp, typelib, development packages, and debuginfo packages. Update the PackageKit packages supplied for the affected SUSE system.

SUSE-SU-2026:5141-1: Security update for PackageKit

Other sources

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Who can exploit this issue?

What action triggers the vulnerability?

Which components should be updated?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What action triggers the vulnerability?

Which components should be updated?