A flaw was found in PackageKit. PackageKit skips the polkit authorization check for transactions carrying the SIMULATE (dry-run) flag. In the dnf5 backend, the RepoRemove handler ignores that contract and always executes the real transaction because its guard is written as (role == REPO_REMOVE || !SIMULATE), which is always true for RepoRemove. An unprivileged local user can therefore perform a genuine package uninstall while claiming to simulate. This vulnerability only affects systems using PackageKit with the dnf5 backend.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6cf9691266 advisory.

    Update to 1.4.0 to fix CVE-2026-19816, GHSA-pwvr-2q5v-xvw4, GHSA-6759-8c43-4xrv, GHSA-6695-qjj5-533m,     GHSA-gmhf-fxfx-m2w9

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-95d69295a4 advisory.

    Update to 1.4.0 to fix CVE-2026-19816, GHSA-pwvr-2q5v-xvw4, GHSA-6759-8c43-4xrv, GHSA-6695-qjj5-533m,     GHSA-gmhf-fxfx-m2w9

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in PackageKit. PackageKit skips the polkit authorization check for transactions carrying     the SIMULATE (dry-run) flag. In the dnf5 backend, the RepoRemove handler ignores that contract and always     executes the real transaction because its guard is written as (role == REPO_REMOVE || !SIMULATE), which is     always true for RepoRemove. An unprivileged local user can therefore perform a genuine package uninstall     while claiming to simulate. This vulnerability only affects systems using PackageKit with the dnf5     backend. (CVE-2026-19816)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
345469	Fedora 44 : PackageKit (2026-6cf9691266)	Nessus	Fedora Local Security Checks	Local	high
345461	Fedora 45 : PackageKit (2026-95d69295a4)	Nessus	Fedora Local Security Checks	Local	high
344427	Linux Distros Unpatched Vulnerability : CVE-2026-19816	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-19816

high

Tenable Plugins

high

high

high