An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve arbitrary code execution outside its sandbox. xdg-dbus-proxy was designed to be part of the sandbox boundary for Flatpak, but it is released as a separate project and is sometimes used by other app frameworks such as Firejail.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e1cac11588 advisory.

    Update to 0.1.9

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3185 advisory.

    An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an     attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial     number on non-reply messages.

    xdg-dbus-proxy was designed to be part of the sandbox boundary for Flatpak, but it is released as a     separate project and is sometimes used by other app frameworks such as Firejail.

    A malicious or compromised Flatpak app could achieve arbitrary code execution outside its sandbox.

    If other app frameworks rely on xdg-dbus-proxy in the same way that Flatpak does, then they will have an     equivalent vulnerability until xdg-dbus-proxy is updated. (CVE-2026-94422)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an
    attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial
    number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve arbitrary
    code execution outside its sandbox. xdg-dbus-proxy was designed to be part of the sandbox boundary for
    Flatpak, but it is released as a separate project and is sometimes used by other app frameworks such as
    Firejail. (CVE-2026-94422)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f10257ca80 advisory.

    Update to 0.1.9

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-93f562a43f advisory.

    Update to 0.1.9

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Debian Linux - xdg-dbus-proxy - None  Ubuntu Linux - security update (CVE-2026-94422)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6510 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6510-1                   security@debian.org     https://www.debian.org/security/                           Alberto Garcia     September 23, 2026                    https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : xdg-dbus-proxy     CVE ID         : CVE-2026-94422     Debian Bug     : 1148782

    It was discovered that an incorrect implementation of message     filtering in xdg-dbus-proxy allows an attacker to bypass the intended     message filtering on the D-Bus session bus by setting a reply serial     number on non-reply messages.

    A malicious or compromised Flatpak app could achieve arbitrary code     execution outside its sandbox.

    If other app frameworks rely on xdg-dbus-proxy in the same way that     Flatpak does, then they will have an equivalent vulnerability until     xdg-dbus-proxy is updated.

    For the stable distribution (trixie), this problem has been fixed in     version 0.1.6-1+deb13u3.

    We recommend that you upgrade your xdg-dbus-proxy packages.

    For the detailed security status of xdg-dbus-proxy please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/xdg-dbus-proxy

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
365520	Fedora 43 : xdg-dbus-proxy (2026-e1cac11588)	Nessus	Fedora Local Security Checks	Local	high
365260	Amazon Linux 2023 : xdg-dbus-proxy (ALAS2023-2026-3185)	Nessus	Amazon Linux Local Security Checks	Local	high
458596	Echo: xdg-dbus-proxy: security update to 0.1.6-1+deb13u3	Tenable Cloud Security	Echo Local Security Checks	Local	high
458596	Echo: xdg-dbus-proxy: security update to 0.1.6-1+deb13u3	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	high
362712	Fedora 45 : xdg-dbus-proxy (2026-f10257ca80)	Nessus	Fedora Local Security Checks	Local	high
358421	Fedora 44 : xdg-dbus-proxy (2026-93f562a43f)	Nessus	Fedora Local Security Checks	Local	high
349508	Linux Distros Unpatched Vulnerability : CVE-2026-94422	Nessus	Misc.	Local	high
349467	Debian dsa-6510 : xdg-dbus-proxy - security update	Nessus	Debian Local Security Checks	Local	high

Detections

Analytics

CVE-2026-94422

high

Tenable Plugins

high

high

high

high

high

high

high

high