xdg-dbus-proxy is a filtering proxy for D-Bus connections. Prior to 0.1.7, a policy parser vulnerability allows bypassing eavesdrop restrictions. The proxy checks for eavesdrop=true in policy rules but fails to handle eavesdrop ='true' (with a space before the equals sign) and similar cases.
Clients can intercept D-Bus messages they should not have access to. This vulnerability is fixed in 0.1.7.
Attack Parameters
Attack Vector
Local
Requires local access
Attack Complexity
Low
Easy to exploit
Attack Requirements
None
No additional conditions
Privileges Required
Low
Basic privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
High
Complete data leak
Integrity
None
No data modification
Availability
None
No disruption
CVSS Vector v4.0
Weakness Type (CWE)
Vulnerable Products 1
| Configuration | From (including) | Up to (excluding) |
|---|---|---|
|
Flatpak Xdg-Dbus-Proxy
cpe:2.3:a:flatpak:xdg-dbus-proxy:*:*:*:*:*:*:*:*
|
— |
0.1.7
|
References 3
https://github.com/flatpak/xdg-dbus-proxy/security/advisories/GHSA-vjp5-hjfm-76…
security-advisories@github.com
http://www.openwall.com/lists/oss-security/2026/04/10/15
af854a3a-2127-422b-91ae-364da2661108
https://lists.debian.org/debian-lts-announce/2026/04/msg00022.html
af854a3a-2127-422b-91ae-364da2661108