CVE-2026-10294

EUVD-2026-33818
A vulnerability has been found in PackageKit up to 1.3.5. Affected is the function g_file_test of the file src/pk-transaction.c of the component API. Such manipulation of the argument frontend-socket leads to improper authorization. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 12.64%
Debian logo
Debian Releases
Debian Product
Codename
packagekit
bookworm
postponed
bookworm (security)
vulnerable
bullseye
postponed
bullseye (security)
vulnerable
forky
1.3.6-1
fixed
sid
1.3.6-1
fixed
trixie
no-dsa
trixie (security)
vulnerable
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
packagekit
bionic
needs-triage
focal
needs-triage
jammy
needs-triage
noble
needs-triage
questing
ignored
resolute
needs-triage
xenial
needs-triage
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
PackageKit
suse enterprise desktop 15 SP7
1.2.8-150600.4.17.1
fixed
suse enterprise sap 12 SP5
1.1.3-24.26.1
fixed
suse enterprise sap 15 SP7
1.2.8-150600.4.17.1
fixed
suse enterprise server 12 SP3
1.1.3-24.26.1
fixed
suse enterprise server 12 SP5
1.1.3-24.26.1
fixed
suse enterprise server 15 SP4
1.2.4-150400.3.34.1
fixed
suse enterprise server 15 SP7
1.2.8-150600.4.17.1
fixed
PackageKit-backend-zypp
suse enterprise desktop 15 SP7
1.2.8-150600.4.17.1
fixed
suse enterprise sap 12 SP5
1.1.3-24.26.1
fixed
suse enterprise sap 15 SP7
1.2.8-150600.4.17.1
fixed
suse enterprise server 12 SP3
1.1.3-24.26.1
fixed
suse enterprise server 12 SP5
1.1.3-24.26.1
fixed
suse enterprise server 15 SP4
1.2.4-150400.3.34.1
fixed
suse enterprise server 15 SP7
1.2.8-150600.4.17.1
fixed
PackageKit-devel
suse enterprise desktop 15 SP7
1.2.8-150600.4.17.1
fixed
suse enterprise sap 12 SP5
1.1.3-24.26.1
fixed
suse enterprise sap 15 SP7
1.2.8-150600.4.17.1
fixed
suse enterprise server 12 SP5
1.1.3-24.26.1
fixed
suse enterprise server 15 SP4
1.2.4-150400.3.34.1
fixed
suse enterprise server 15 SP7
1.2.8-150600.4.17.1
fixed
PackageKit-gstreamer-plugin
suse enterprise desktop 15 SP7
1.2.8-150600.4.17.1
fixed
suse enterprise sap 15 SP7
1.2.8-150600.4.17.1
fixed
suse enterprise server 15 SP7
1.2.8-150600.4.17.1
fixed
suse enterprise workstation 15 SP7
1.2.8-150600.4.17.1
fixed
PackageKit-gtk3-module
suse enterprise desktop 15 SP7
1.2.8-150600.4.17.1
fixed
suse enterprise sap 15 SP7
1.2.8-150600.4.17.1
fixed
suse enterprise server 15 SP7
1.2.8-150600.4.17.1
fixed
suse enterprise workstation 15 SP7
1.2.8-150600.4.17.1
fixed
PackageKit-lang
suse enterprise desktop 15 SP7
1.2.8-150600.4.17.1
fixed
suse enterprise sap 12 SP5
1.1.3-24.26.1
fixed
suse enterprise sap 15 SP7
1.2.8-150600.4.17.1
fixed
suse enterprise server 12 SP3
1.1.3-24.26.1
fixed
suse enterprise server 12 SP5
1.1.3-24.26.1
fixed
suse enterprise server 15 SP4
1.2.4-150400.3.34.1
fixed
suse enterprise server 15 SP7
1.2.8-150600.4.17.1
fixed
libpackagekit-glib2-18
suse enterprise desktop 15 SP7
1.2.8-150600.4.17.1
fixed
suse enterprise sap 12 SP5
1.1.3-24.26.1
fixed
suse enterprise sap 15 SP7
1.2.8-150600.4.17.1
fixed
suse enterprise server 12 SP3
1.1.3-24.26.1
fixed
suse enterprise server 12 SP5
1.1.3-24.26.1
fixed
suse enterprise server 15 SP4
1.2.4-150400.3.34.1
fixed
suse enterprise server 15 SP7
1.2.8-150600.4.17.1
fixed
libpackagekit-glib2-devel
suse enterprise desktop 15 SP7
1.2.8-150600.4.17.1
fixed
suse enterprise sap 12 SP5
1.1.3-24.26.1
fixed
suse enterprise sap 15 SP7
1.2.8-150600.4.17.1
fixed
suse enterprise server 12 SP5
1.1.3-24.26.1
fixed
suse enterprise server 15 SP4
1.2.4-150400.3.34.1
fixed
suse enterprise server 15 SP7
1.2.8-150600.4.17.1
fixed
typelib-1_0-PackageKitGlib-1_0
suse enterprise desktop 15 SP7
1.2.8-150600.4.17.1
fixed
suse enterprise sap 12 SP5
1.1.3-24.26.1
fixed
suse enterprise sap 15 SP7
1.2.8-150600.4.17.1
fixed
suse enterprise server 12 SP3
1.1.3-24.26.1
fixed
suse enterprise server 12 SP5
1.1.3-24.26.1
fixed
suse enterprise server 15 SP4
1.2.4-150400.3.34.1
fixed
suse enterprise server 15 SP7
1.2.8-150600.4.17.1
fixed
Common Weakness Enumeration
References
https://github.com/PackageKit/PackageKit/
https://github.com/PackageKit/PackageKit/issues/969
https://vuldb.com/cve/CVE-2026-10294
https://vuldb.com/submit/826470
https://vuldb.com/vuln/367587
https://vuldb.com/vuln/367587/cti