Pipewire: pipewire: sandbox escape and arbitrary code execution via malicious library loading
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.8epss 0.2%
exploitation probability
0.2%top 89% of all CVEs
observed exploitation
nono source reports it
A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak, by exploiting PipeWire's PulseAudio compatibility layer. An attacker with minimal permissions within a sandboxed environment can load a malicious library, leading to arbitrary code execution outside the sandbox and potential compromise of the user's system.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected products
pipewireRed Hat · Red Hat Enterprise Linux 10Red Hat · Red Hat Enterprise Linux 10.0 Extended Update SupportRed Hat · Red Hat Enterprise Linux 7Red Hat · Red Hat Enterprise Linux 8Red Hat · Red Hat Enterprise Linux 9Red Hat · Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsRed Hat · Red Hat Enterprise Linux 9.4 Update Services for SAP SolutionsRed Hat · Red Hat Enterprise Linux 9.6 Extended Update SupportReferences
https://access.redhat.com/errata/RHSA-2026:47082https://access.redhat.com/errata/RHSA-2026:47083https://access.redhat.com/errata/RHSA-2026:51064https://access.redhat.com/errata/RHSA-2026:56028https://access.redhat.com/errata/RHSA-2026:56029https://access.redhat.com/errata/RHSA-2026:61768https://access.redhat.com/security/cve/CVE-2026-5674https://bugzilla.redhat.com/show_bug.cgi?id=2455341