CVE-2026-5674

Name of the Vulnerable Software and Affected Versions PipeWire (affected versions not specified)

Description A flaw in the PulseAudio compatibility layer of PipeWire, a multimedia server, allows an attacker to escape sandboxed applications, such as Flatpak. An attacker with minimal permissions within a sandboxed environment can exploit an uncontrolled library search path to load a malicious library. This leads to arbitrary code execution outside the sandbox, potentially compromising the user's system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.