Arbitrary Command Execution Vulnerability in Lomiri Download Manager by UBports

CVE-2026-96425

What is CVE-2026-96425?

The Lomiri Download Manager, developed by UBports, is susceptible to a vulnerability arising from an incorrect DBus policy. This flaw allows unauthorized users to execute arbitrary commands with root privileges through DBus, potentially compromising the system's integrity. It is crucial for users to address this issue promptly to mitigate the risk of unauthorized command execution.

References