https://seclists.org/oss-sec/2026/q2/573: On the issue of MIME handlers that execute arbitrary code (e.g. Wine)
Published May 19, 2026
·Updated
Affected Software
5 affected components
Winehq Wine
freedesktop.org xdg-desktop-portal
Gnome xdg-desktop-portal-gtk
LXQt PCManFM-Qt
KDE Dolphin<25.12.3
Frequently Asked Questions
1
What is the severity of the vulnerability related to MIME handlers in Wine?
The severity of the vulnerability related to MIME handlers in Wine is considered high due to the potential for arbitrary code execution.
2
How do I mitigate the risk of the vulnerability identified in Wine?
To mitigate the risk of the vulnerability in Wine, ensure that MIME handlers are not set to execute arbitrary code from untrusted files.
3
Which software programs are affected by the vulnerability regarding MIME handlers?
The vulnerability regarding MIME handlers affects Wine, xdg-desktop-portal, xdg-desktop-portal-gtk, PCManFM-Qt, and KDE Dolphin.
4
What should developers consider when implementing MIME handling in applications?
Developers should avoid setting MIME handlers that execute commands or code without proper validation or user confirmation.
5
Is there an official recommendation for using MIME handlers securely?
Yes, the official recommendation is to never set MIME handlers that will blindly execute commands from the files being handled.