CVE-2026-58015

CVE-2026-58015 (GLib) : A flaw in GLib’s D‑Bus client-side SASL (DBUS_COOKIE_SHA1) does not validate the server-provided cookie_context. A malicious D‑Bus server can supply a cookie_context with path traversal, causing the client to read an arbitrary file and exfiltrate sensitive data by verifyin...