[ CVE-2026-96425 · Published 16 Oct 2026 ]
Vulnerability in UBports lomiri-download-manager
CVSS 5.5
EPSS <1%No fix listed yet
[ Description ]Official description
Incorrect DBus policy for lomiri-download-manager allows arbitrary user to run arbitrary command as root over DBus
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.
[ References ]References
- forums.ubports.com/topic/12671/security-advisory-arbitrary-root-command-execution-and-u…
- gitlab.com/ubports/development/core/lomiri-download-manager/-/commit/5fd50939a3cacef418…
- gitlab.com/ubports/development/core/lomiri-download-manager/-/commit/779dfd5bbeb5fe8877…
- gitlab.com/ubports/development/core/lomiri-download-manager/-/work_items/17