A security vulnerability (CVE-2026-94422) was identified in xdg-dbus-proxy, a filtering proxy for D-Bus connections originally part of the flatpak project. The flaw allows message filtering bypass via reply serial, which can lead to sandbox escape. Red Hat has issued an important security update for xdg-dbus-proxy in Red Hat Enterprise Linux 9.2 to address this issue. The vulnerability is rated with high severity by Red Hat Product Security. The update is available and should be applied to affected systems to mitigate the risk.