gvfs vulnerabilities

CVEs whose affected-version data names the gvfs package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-88924High· 7.0PoC

1w ago

Gvfs: gvfs-admin socket ownership race permits local root

A flaw was found in the admin backend of gvfs. The privileged gvfsd-admin daemon changes the ownership of newly created private D-Bus sockets by calling the link-following chown() function on a pathname inside a user-controlled directory…

▾ MidnightGNOME · gvfsEPSS 0.17%via CVEORG