CVE-2026-96424

Description

Incorrect DBus policy for lomiri-upload-manager (part of lomiri-download-manager) allows arbitrary user to read arbitrary file as root over DBus

Affected Platforms

Weakness Type

CWE-732

References

• https://forums.ubports.com/topic/12671/security-advisory-arbitrary-root-command-…
• https://gitlab.com/ubports/development/core/lomiri-download-manager/-/commit/779…
• https://gitlab.com/ubports/development/core/lomiri-download-manager/-/work_items…