← Database

CVE-2026-50292

HIGH CVSS: 7.4 Published: 2026-06-04 Modified: 2026-07-22

Description

In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution

Affected Platforms

Freedesktop Libinput

Weakness Type

CWE-93

References