https://seclists.org/oss-sec/2026/q2/94: xdg-dbus-proxy CVE-2026-34080: Eavesdrop filter bypass allows message interception
Published Apr 10, 2026
·Updated
Affected Software
1 affected component
Flatpak xdg-dbus-proxy
Frequently Asked Questions
1
What is the severity of CVE-2026-34080?
CVE-2026-34080 has a high severity rating, indicating a significant risk for exploitation.
2
How do I fix CVE-2026-34080?
To fix CVE-2026-34080, update the Flatpak xdg-dbus-proxy to the latest patched version as recommended by the developers.
3
What types of attacks does CVE-2026-34080 enable?
CVE-2026-34080 allows attackers to intercept messages, potentially leading to eavesdropping on sensitive communications.
4
Who is affected by CVE-2026-34080?
Users and applications utilizing the Flatpak xdg-dbus-proxy are affected by CVE-2026-34080.
5
What is xdg-dbus-proxy in relation to CVE-2026-34080?
xdg-dbus-proxy is a proxy for D-Bus messages in Flatpak that is vulnerable to an eavesdrop filter bypass in CVE-2026-34080.