PYSEC-2026-783 aptdaemon Information Disclosure via Improper Input Validation in Transaction class

🗓️ 06 Jul 2026 08:03:28Reported by GoogleType

osv

osv🔗 osv.dev👁 2 Views

Aptdaemon Locale input validation flaw enables unprivileged users to disclose file existence as root.

Reporter	Title	Published	Views	Family All 16
Circl	CVE-2020-15703	28 Oct 202013:20	–	circl
CVE	CVE-2020-15703	31 Oct 202003:45	–	cve
Cvelist	CVE-2020-15703 aptdaemon allows unprivileged users to test for the presence of local files via the transaction Locale property	31 Oct 202003:45	–	cvelist
EUVD	EUVD-2022-5615	3 Oct 202520:07	–	euvd
Github Security Blog	aptdaemon Information Disclosure via Improper Input Validation in Transaction class	24 May 202217:32	–	github
NVD	CVE-2020-15703	31 Oct 202004:15	–	nvd
OpenVAS	Ubuntu: Security Advisory (USN-4537-1)	25 Sep 202000:00	–	openvas
OSV	GHSA-WPMR-Q825-X4C6 aptdaemon Information Disclosure via Improper Input Validation in Transaction class	24 May 202217:32	–	osv
OSV	UBUNTU-CVE-2020-15703	24 Sep 202000:00	–	osv
OSV	USN-4537-1 aptdaemon vulnerability	24 Sep 202012:52	–	osv

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-15703
bugs	www.bugs.launchpad.net/ubuntu/+source/aptdaemon/+bug/1888235
github	www.github.com/linuxmint/aptdaemon
github	www.github.com/linuxmint/aptdaemon/blob/4d24cb61575ac6fbee8d5e61ef933e6093ee0a2e/debian/patches/CVE-2020-15703.patch
ubuntu	www.ubuntu.com/security/notices/USN-4537-1
eyecontrol	www.eyecontrol.nl/blog/the-story-of-3-cves-in-ubuntu-desktop.html
pypi	www.pypi.org/project/aptdaemon
github	www.github.com/advisories/GHSA-wpmr-q825-x4c6

07 Jul 2026 11:45Current

6Medium risk

Vulners AI Score6

CVSS 3.14

EPSS0.0048

Aptdaemon Locale property Transaction class Input validation Information disclosure Root access