CVE-2026-41651

🗓️ 05 Oct 2026 20:06:06Reported by KitPloitType

kitploit🔗 kitploit.com👁 18 Views

TOCTOU race in PackageKit 1.0.2-1.3.4 enables local privilege escalation to root via polkit bypass.

Reporter	Title	Published	Views	Family All 177
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Packagekit_Project Packagekit	3 May 202602:54	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Packagekit_Project Packagekit	6 May 202606:12	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Packagekit_Project Packagekit	25 Apr 202603:29	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Packagekit_Project Packagekit	29 Apr 202615:40	–	githubexploit
GithubExploit	Exploit for CVE-2026-41651	24 Apr 202610:32	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Packagekit_Project Packagekit	20 May 202607:26	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Packagekit_Project Packagekit	25 Jul 202608:13	–	githubexploit
GithubExploit	Exploit for CVE-2026-41651	23 Apr 202609:58	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Packagekit_Project Packagekit	2 Aug 202610:57	–	githubexploit
GithubExploit	Exploit for CVE-2026-41651	23 Apr 202608:57	–	githubexploit

Source	Link
github	www.github.com/PackageKit/PackageKit/commit/76cfb675
github	www.github.com/advisories/GHSA-f55j-vvr9-69xv
github	www.github.com/PackageKit/PackageKit/releases

05 Oct 2026 20:06Current

8High risk

Vulners AI Score8

CVSS 3.18.8

EPSS0.0046

SSVC

PackageKit TOCTOU race condition privilege escalation polkit bypass local transaction state