Insecure DBus Policy in Lomiri Download Manager Allows Unauthorized File Access

CVE-2026-96424

What is CVE-2026-96424?

A vulnerability exists in Lomiri Download Manager due to an incorrect DBus policy, which allows an arbitrary user to access and read files as root through DBus. This flaw compromises the security integrity of the affected systems by enabling unauthorized access to sensitive files, potentially leading to further exploitation. It's essential for users to be aware of this issue and for the vendor to provide an adequate fix to prevent unauthorized file reads.

References