CVE-2026-96425

Description

Incorrect DBus policy for lomiri-download-manager allows arbitrary user to run arbitrary command as root over DBus

Affected Platforms

Weakness Type

CWE-732

References

• https://forums.ubports.com/topic/12671/security-advisory-arbitrary-root-command-…
• https://gitlab.com/ubports/development/core/lomiri-download-manager/-/commit/5fd…
• https://gitlab.com/ubports/development/core/lomiri-download-manager/-/commit/779…
• https://gitlab.com/ubports/development/core/lomiri-download-manager/-/work_items…