https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T08:28:03.985548+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-34080 CVE-2026-34080 — xdg-dbus-proxy has an eavesdrop filter bypass allowing message interception 2026-10-06T08:28:03.987340+00:00

Affected: flatpak xdg-dbus-proxy

xdg-dbus-proxy is a filtering proxy for D-Bus connections. Prior to 0.1.7, a policy parser vulnerability allows bypassing eavesdrop restrictions. The proxy checks for eavesdrop=true in policy rules but fails to handle eavesdrop ='true' (with a space before the equals sign) and similar cases. Clients can intercept D-Bus messages they should not have access to. This vulnerability is fixed in 0.1.7.