CVE-2026-59678

An Incorrect Authorization vulnerability in Linux-Gaming PortProtonQt allows any users to mount and unmount arbitrary file systems and modify the network configuration via NetworkManager. This issue affects PortProtonQt before 0d0f0950ebd948cdf82e8c3e1ebd2bcb9b8bafbe.

CVSS

No CVSS.

References

Link	Resource
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-59678

Configurations

No configuration.

History

24 Oct 2026, 13:10

Type	Values Removed	Values Added
Summary		(es) Una vulnerabilidad de autorización incorrecta en Linux-Gaming PortProtonQt permite a cualquier usuario montar y desmontar sistemas de archivos arbitrarios y modificar la configuración de red a través de NetworkManager. Este problema afecta a PortProtonQt antes de 0d0f0950ebd948cdf82e8c3e1ebd2bcb9b8bafbe.

Information

Published : 2026-07-23 08:16

Updated : 2026-10-24 13:10

NVD link : CVE-2026-59678

Mitre link : CVE-2026-59678

CVE.ORG link : CVE-2026-59678

JSON object : View

Products Affected

No product.

CWE

CWE-863

Incorrect Authorization

{"id": "CVE-2026-59678", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-59678", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-23T14:01:46.505957Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "meissner@suse.de", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 7.1, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "meissner@suse.de", "affectedData": [{"vendor": "Linux-Gaming", "product": "PortProtonQt", "versions": [{"status": "affected", "version": "0", "lessThan": "0d0f0950ebd948cdf82e8c3e1ebd2bcb9b8bafbe", "versionType": "git"}], "packageName": "PortProtonQt", "defaultStatus": "unaffected"}]}], "published": "2026-07-23T08:16:25.003", "references": [{"url": "https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-59678", "source": "meissner@suse.de"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "meissner@suse.de", "description": [{"lang": "en", "value": "CWE-863"}]}], "descriptions": [{"lang": "en", "value": "An Incorrect Authorization vulnerability in Linux-Gaming PortProtonQt allows any users to mount and unmount arbitrary file systems and modify the network configuration via NetworkManager.\n\n\n\n\n\n\nThis issue affects PortProtonQt before 0d0f0950ebd948cdf82e8c3e1ebd2bcb9b8bafbe."}, {"lang": "es", "value": "Una vulnerabilidad de autorizaci\u00f3n incorrecta en Linux-Gaming PortProtonQt permite a cualquier usuario montar y desmontar sistemas de archivos arbitrarios y modificar la configuraci\u00f3n de red a trav\u00e9s de NetworkManager.\n\nEste problema afecta a PortProtonQt antes de 0d0f0950ebd948cdf82e8c3e1ebd2bcb9b8bafbe."}], "lastModified": "2026-10-24T13:10:00.147", "sourceIdentifier": "meissner@suse.de"}