GHSA-mxjh-5564-f256MediumCVSS 5.5

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis...

Published
March 27, 2026
Last Modified
May 15, 2026

🔗 CVE IDs covered (1)

📋 Description

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.

🔗 References (5)