MIME Handler Vulnerability in Wine Affects Windows Executable File Types

CVE-2026-48831

What is CVE-2026-48831?

Wine contains a vulnerability related to its .desktop file, which registers as a MIME handler for various Windows executable file types, including EXE files. Under certain configurations, this vulnerability results in EXE files being executed without proper safeguards, using the permissions of the user who invoked it. This situation poses security risks by potentially allowing malicious files to escape from Flatpak and Snap sandboxes. While there are concerns regarding the usability impacts of any fix, this vulnerability calls for increased attention to handling executable files securely within Wine environments.

References