CVE-2026-61898

Name of the Vulnerable Software and Affected Versions accountsservice versions prior to 23.13.9-8ubuntu7

Description Ubuntu-specific language helper scripts, specifically save-to-pam-env and update-langlist, fail to properly sanitize the LANGUAGE entry within the ~/.pam environment file. This input is interpolated unescaped into a GNU sed replacement expression. An attacker can exploit this by injecting a sed e flag, which allows the execution of arbitrary shell commands with the privileges of the AccountsService helper process (real UID 0) through the SetLanguage D-Bus method.

Recommendations Update accountsservice to version 23.13.9-8ubuntu7 or later.