CVE-2026-41651

🗓️ 24 Aug 2026 02:12:21Reported by KitPloitType

kitploit🔗 kitploit.com👁 2 Views

TOCTOU race in PackageKit 1.0.2-1.3.4 enables local privilege escalation to root via polkit bypass.

Reporter	Title	Published	Views	Family All 159
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Packagekit_Project Packagekit	3 May 202602:54	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Packagekit_Project Packagekit	6 May 202606:12	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Packagekit_Project Packagekit	25 Apr 202603:29	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Packagekit_Project Packagekit	29 Apr 202615:40	–	githubexploit
GithubExploit	Exploit for CVE-2026-41651	24 Apr 202610:32	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Packagekit_Project Packagekit	20 May 202607:26	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Packagekit_Project Packagekit	25 Jul 202608:13	–	githubexploit
GithubExploit	Exploit for CVE-2026-41651	23 Apr 202609:58	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Packagekit_Project Packagekit	2 Aug 202610:57	–	githubexploit
GithubExploit	Exploit for CVE-2026-41651	23 Apr 202608:57	–	githubexploit

Source	Link
github	www.github.com/advisories/GHSA-f55j-vvr9-69xv
github	www.github.com/PackageKit/PackageKit/releases
github	www.github.com/PackageKit/PackageKit/commit/76cfb675

24 Aug 2026 02:12Current

CVSS 3.18.8

EPSS0.0046

SSVC

PackageKit TOCTOU race condition privilege escalation polkit bypass local transaction state