Is CVE-2026-5674 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-5674?

CVE-2026-5674 has a CVSS v3 severity of HIGH (8.8).

Back

CVE-2026-5674

Description

A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak, by exploiting PipeWire's PulseAudio compatibility layer. An attacker with minimal permissions within a sandboxed environment can load a malicious library, leading to arbitrary code execution outside the sandbox and potential compromise of the user's system.