Skip to content
Threat Feed
Subscribe

Tag

Pipewire

1 brief RSS
high advisory

PipeWire Vulnerability CVE-2026-5674 Allows Sandbox Escape and Arbitrary Code Execution

A critical vulnerability, CVE-2026-5674, exists in PipeWire, a multimedia server, enabling an attacker to escape sandboxed applications like Flatpak by exploiting its PulseAudio compatibility layer to load a malicious library, leading to arbitrary code execution outside the sandbox and potential system compromise.

PipeWire +2 sandbox-escape privilege-escalation arbitrary-code-execution linux flatpak
4t 1c