https://seclists.org/oss-sec/2026/q2/574: On the issue of MIME handlers that execute arbitrary code (e.g. Wine)
Published May 19, 2026
·Updated
Affected Software
5 affected components
Flatpak Flatpak
Wine Wine
freedesktop.org xdg-desktop-portal (OpenURI portal / org.freedesktop.portal.OpenURI.OpenFile)
freedesktop.org D-BUS
systemd systemd-nspawn
Frequently Asked Questions
1
What is the severity of vulnerability ID On the issue of MIME handlers that execute arbitrary code?
The severity of this vulnerability is critical due to its potential to allow arbitrary code execution.
2
How do I mitigate vulnerability ID On the issue of MIME handlers that execute arbitrary code?
Mitigation can be achieved by restricting access to the OpenURI portal and reviewing application permissions within Flatpak.
3
Who is affected by vulnerability ID On the issue of MIME handlers that execute arbitrary code?
Users of Flatpak and Wine that utilize the OpenURI portal for file handling are affected by this vulnerability.
4
What are the potential consequences of vulnerability ID On the issue of MIME handlers that execute arbitrary code?
The potential consequences include unauthorized execution of code, which can lead to data compromise or full system takeover.
5
Is there a patch available for vulnerability ID On the issue of MIME handlers that execute arbitrary code?
As of now, specific patches or updates to address this vulnerability have not been released.