A flaw was found in libinput. A local attacker who can place a specially crafted Lua bytecode file in certain system or user configuration directories can bypass security restrictions. This allows the attacker to run unauthorized code with the same permissions as the program using libinput, such as a graphical compositor. This could lead to the attacker monitoring keyboard input and sending that information to an external location.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-56fa441129 advisory.

    libinput 1.31.1, fixes Lua plugin sandbox escape (CVE-2026-35093, CVE-2026-35094)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-5aafda8cd8 advisory.

    libinput 1.30.3, fixes Lua plugin sandbox escape (CVE-2026-35093,CVE-2026-35094)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in libinput. A local attacker who can place a specially crafted Lua bytecode file in     certain system or user configuration directories can bypass security restrictions. This allows the     attacker to run unauthorized code with the same permissions as the program using libinput, such as a     graphical compositor. This could lead to the attacker monitoring keyboard input and sending that     information to an external location. (CVE-2026-35093)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
310672	Fedora 44 : libinput (2026-56fa441129)	Nessus	Fedora Local Security Checks	medium
305023	Fedora 43 : libinput (2026-5aafda8cd8)	Nessus	Fedora Local Security Checks	medium
304630	Linux Distros Unpatched Vulnerability : CVE-2026-35093	Nessus	Misc.	high

Detections

Analytics

CVE-2026-35093

high

Tenable Plugins

medium

medium

high