CVE-2026-96424

7.8High

Published 16 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash

7.8High

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None
Impact: Full C/I/A compromise
Weakness: CWE-732

Impact

Local unprivileged users can read arbitrary files as root. The attacker only needs local shell access to communicate over the system DBus.

Root cause

An overly permissive DBus configuration policy allows unprivileged users to call file-reading methods on the lomiri-upload-manager service.

Affected systems

lomiri-download-manager (lomiri-upload-manager component) prior to commit 779dfd5bbeb5fe8877627b772e5024e40eda38aa; exact release versions not listed — check the vendor advisory.

CVSS v3.1 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Fix & remediation

Update lomiri-download-manager to the patched version containing commit 779dfd5b, or restrict DBus access in /etc/dbus-1/system.d/ to prevent unprivileged users from calling lomiri-upload-manager.

shell

$ sudo apt-get update && sudo apt-get install --only-upgrade lomiri-download-manager

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

Incorrect DBus policy for lomiri-upload-manager (part of lomiri-download-manager) allows arbitrary user to read arbitrary file as root over DBus

References

Source: nvd.nist.gov/vuln/detail/CVE-2026-96424