Skip to content
OpenAdvisories

Package · Debian

rust-zbus-polkit

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.3
    CVE-2026-78422

    zbus_polkit: polkit authorization bypass via PID reuse due to incorrect D-Bus type for the subject UID

    Subject::new_for_owner() in the zbus_polkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer (D-Bus type u), whereas the org.freedesktop.PolicyKit1.Authority interface specifies a signed 32-bit integer (D-Bus type i).…

    z-galaxy zbus_polkit rust-zbus-polkit zbus_polkit Debian Ubuntu crates.io