Linux-Gaming PortProtonQt contains an incorrect authorization vulnerability (CWE-863) that permits unprivileged users to perform unauthorized actions such as mounting and unmounting arbitrary file systems and modifying network configurations through NetworkManager. The affected versions are those prior to commit 0d0f0950ebd948cdf82e8c3e1ebd2bcb9b8bafbe. The vulnerability is rated high severity with a CVSS 4.0 score of 7.1. No vendor advisory or patch information is provided, and no known exploits are reported in the wild.

Exploitation of this vulnerability allows any user on the affected system to mount and unmount arbitrary file systems and alter network configurations, potentially leading to unauthorized access or disruption of network services. The impact is significant given the ability to modify critical system configurations without proper authorization.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict user access to the affected PortProtonQt application and monitor for unauthorized use. Avoid running PortProtonQt in environments where untrusted users have access.