A vulnerability in PackageKit Zypp Backend versions before 1.4.1 allows untrusted users to roll back security updates, potentially leading to privilege escalation. This issue affects local users with limited privileges and can impact confidentiality, integrity, and availability of the system. The flaw is tracked as CVE-2026-104619 and has a high severity rating with a CVSS score of 7.8.