Threats tagged 'ghsa-pv76-vr6r-5vv5'

A vulnerability in dnf5daemon-server allows a local attacker to modify another user's live package-management session by exploiting insufficient verification of the caller's identity on dynamically exported D-Bus session objects. This can lead to the attacker replacing the resolved transaction plan, causing the root daemon to apply unauthorized package operations if the legitimate user authorizes execution.