PT-2026-28805
CVE-2026-25704
·
Published
2026-03-30
·
Updated
2026-04-19
Description by
CVSS 4.0
5.8
MediumMetricsAV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
cosmic-greeter versions prior to https://github.Com/pop-os/cosmic-greeter/pull/426
Description
A Time-of-check Time-of-use (TOCTOU) race condition exists in cosmic-greeter. This condition can allow an attacker to regain privileges that should have been dropped and exploit vulnerabilities in the checking logic.
Recommendations
Update cosmic-greeter to a version after https://github.Com/pop-os/cosmic-greeter/pull/426.
Found an issue in the description? Have something to add? Feel free to write us 👾