Log in Start free

Vulnerability · Published Jul 16, 2026 · Assigned by redhat

CVE-2026-5674Pipewire: pipewire: sandbox escape and arbitrary code execution via malicious library loading

High 8.8

In plain English

A high-severity uncontrolled search path in pipewire. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.2%top 91.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak, by exploiting PipeWire's PulseAudio compatibility layer. An attacker with minimal permissions within a sandboxed environment can load a malicious library, leading to arbitrary code execution outside the sandbox and potential compromise of the user's system.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:10pipewire1.4.11-1.el10_2ALSA-2026:47083
AlmaLinux:9pipewire1.4.11-1.el9_8ALSA-2026:47082
AlmaLinux:10pipewire-alsa1.4.11-1.el10_2ALSA-2026:47083
AlmaLinux:9pipewire-alsa1.4.11-1.el9_8ALSA-2026:47082
AlmaLinux:10pipewire-devel1.4.11-1.el10_2ALSA-2026:47083
AlmaLinux:9pipewire-devel1.4.11-1.el9_8ALSA-2026:47082
AlmaLinux:10pipewire-gstreamer1.4.11-1.el10_2ALSA-2026:47083
AlmaLinux:9pipewire-gstreamer1.4.11-1.el9_8ALSA-2026:47082
AlmaLinux:10pipewire-jack-audio-connection-kit1.4.11-1.el10_2ALSA-2026:47083
AlmaLinux:9pipewire-jack-audio-connection-kit1.4.11-1.el9_8ALSA-2026:47082
AlmaLinux:10pipewire-jack-audio-connection-kit-devel1.4.11-1.el10_2ALSA-2026:47083
AlmaLinux:9pipewire-jack-audio-connection-kit-devel1.4.11-1.el9_8ALSA-2026:47082
AlmaLinux:10pipewire-jack-audio-connection-kit-libs1.4.11-1.el10_2ALSA-2026:47083
AlmaLinux:9pipewire-jack-audio-connection-kit-libs1.4.11-1.el9_8ALSA-2026:47082
AlmaLinux:10pipewire-libs1.4.11-1.el10_2ALSA-2026:47083
AlmaLinux:9pipewire-libs1.4.11-1.el9_8ALSA-2026:47082
AlmaLinux:10pipewire-module-x111.4.11-1.el10_2ALSA-2026:47083
AlmaLinux:9pipewire-module-x111.4.11-1.el9_8ALSA-2026:47082
AlmaLinux:10pipewire-plugin-libcamera1.4.11-1.el10_2ALSA-2026:47083
AlmaLinux:10pipewire-pulseaudio1.4.11-1.el10_2ALSA-2026:47083
AlmaLinux:9pipewire-pulseaudio1.4.11-1.el9_8ALSA-2026:47082
AlmaLinux:10pipewire-utils1.4.11-1.el10_2ALSA-2026:47083
AlmaLinux:9pipewire-utils1.4.11-1.el9_8ALSA-2026:47082
Debian:12pipewireno fix listedDEBIAN-CVE-2026-5674
Debian:13pipewireno fix listedDEBIAN-CVE-2026-5674
Debian:14pipewire1.6.6-1DEBIAN-CVE-2026-5674
Rocky Linux:10pipewire0:1.4.11-1.el10_2RLSA-2026:47083
Rocky Linux:9pipewire0:1.4.11-1.el9_8RLSA-2026:47082
Ubuntu:22.04:LTSpipewireno fix listedUBUNTU-CVE-2026-5674
Ubuntu:24.04:LTSpipewireno fix listedUBUNTU-CVE-2026-5674
Ubuntu:26.04:LTSpipewireno fix listedUBUNTU-CVE-2026-5674
Ubuntu:26.10pipewireno fix listedUBUNTU-CVE-2026-5674

Affected products (as reported)

VendorProductVersions
pipewire 0 – through 1.6.8
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions see references
Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions see references
Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 9 see references

Weakness: CWE-427 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References