A Skipped Cookie Check Let Flatpak Apps Escape PipeWire’s Sandbox Entirely

A Skipped Cookie Check Let Flatpak Apps Escape PipeWire’s Sandbox Entirely

News
Yanac

CVE-2026-5674 chains a broken PulseAudio auth check, default module loading, and an unrestricted dlopen() into a full PipeWire sandbox escape from inside Flatpak apps like Discord.
A Skipped Cookie Check Let Flatpak Apps Escape PipeWire’s Sandbox Entirely on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses.Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing CoursesRead More