CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.9. See the original NVD description below for full technical details.
CVE
CVE-2026-58015
Severity
MEDIUM
CVSS
5.9
EPSS
0.48%
Original NVD Description
A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication mechanism does not validate the cookie_context parameter received from the server. A malicious D-Bus server can supply a cookie_context containing path traversal sequences, causing the client to read an arbitrary file and exfiltrate sensitive data by verifying guessed file contents against a generated hash.
Related CVEs
Other vulnerabilities affecting the same vendor(s)