CVE-2026-41651

🗓️ 22 Apr 2026 13:11:40Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 255 Views🌐 WEB

CVE-2026-41651 TOCTOU race in PackageKit lets unprivileged users install as root via flags.

Reporter	Title	Published	Views	Family All 152
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Packagekit_Project Packagekit	3 May 202602:54	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Packagekit_Project Packagekit	6 May 202606:12	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Packagekit_Project Packagekit	25 Apr 202603:29	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Packagekit_Project Packagekit	29 Apr 202615:40	–	githubexploit
GithubExploit	Exploit for CVE-2026-41651	24 Apr 202610:32	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Packagekit_Project Packagekit	20 May 202607:26	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Packagekit_Project Packagekit	25 Jul 202608:13	–	githubexploit
GithubExploit	Exploit for CVE-2026-41651	23 Apr 202609:58	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Packagekit_Project Packagekit	2 Aug 202610:57	–	githubexploit
GithubExploit	Exploit for CVE-2026-41651	23 Apr 202608:57	–	githubexploit

NVD

Vulners

Node

packagekit_project packagekitRange1.0.2–1.3.5

[
  {
    "vendor": "PackageKit",
    "product": "PackageKit",
    "versions": [
      {
        "version": ">= 1.0.2, <= 1.3.4",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/PackageKit/PackageKit/blob/04057883189efa225a7c785591aa87cb299782f8/src/pk-transaction.c
github	www.github.security.telekom.com/2026/04/pack2theroot-linux-local-privilege-escalation.html
github	www.github.com/PackageKit/PackageKit/blob/04057883189efa225a7c785591aa87cb299782f8/src/pk-transaction.c
github	www.github.com/PackageKit/PackageKit/security/advisories/GHSA-f55j-vvr9-69xv
github	www.github.com/PackageKit/PackageKit/blob/04057883189efa225a7c785591aa87cb299782f8/src/pk-transaction.c
access	www.access.redhat.com/errata/RHSA-2026:17561
security	www.security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41651.json
access	www.access.redhat.com/errata/RHSA-2026:19354
access	www.access.redhat.com/errata/RHSA-2026:19141
openwall	www.openwall.com/lists/oss-security/2026/04/22/6

Parameter	Position	Path	Description	CWE
transaction_flags	nested	org.freedesktop.PackageKit.Transaction.InstallFiles	TOCTOU race by overwriting transaction flags on second InstallFiles call before authorization/dispatch	CWE-367
full_paths	nested	org.freedesktop.PackageKit.Transaction.InstallFiles	TOCTOU race by overwriting transaction flags on second InstallFiles call before authorization/dispatch	CWE-367

15 Jul 2026 02:21Current

6Medium risk

Vulners AI Score6

CVSS 3.18.8

EPSS0.0046

SSVC

CWE-367