CVE-2026-50265

Name of the Vulnerable Software and Affected Versions libinput (affected versions not specified)

Description A flaw in libinput allows a local attacker with access to '/dev/uinput' to inject arbitrary udev properties via the libinput-device-group helper. This injection can lead to root code execution, such as by exploiting REMOVE CMD properties that are executed upon device removal, enabling the attacker to gain elevated privileges on the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.