THREAT OPS › Threat News › [NVD] CVE-2026-5674 (HIGH 8.8) — A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak, by exploiting PipeWire's PulseAudio compatibility layer. An attacker with minimal permissions within a sandboxed environment can load a mali
[NVD] CVE-2026-5674 (HIGH 8.8) — A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak, by exploiting PipeWire's PulseAudio compatibility layer. An attacker with minimal permissions within a sandboxed environment can load a mali
CVE-2026-5674 CVSS: 8.8 HIGH Published: 2026-07-16T14:16:56.070
A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak, by exploiting PipeWire's PulseAudio compatibility layer. An attacker with minimal permissions within a sandboxed environment can load a malicious library, leading to arbitrary code execution outs
MITRE ATT&CK techniques
- Malicious LibraryT1204.005
Indicators of compromise
- CVE-2026-5674cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-5674