--- title: A Skipped Cookie Check Let Flatpak Apps Escape... description: CVE-2026-5674 is a CVSS 8.8 sandbox escape in PipeWire's PulseAudio compatibility layer. Three chained flaws enable the exploit: the authentication cookie is... canonical: https://daily.dev/posts/a-skipped-cookie-check-let-flatpak-apps-escape-pipewire-s-sandbox-entirely-i32pfsskc twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: A Skipped Cookie Check Let Flatpak Apps Escape PipeWire’s Sandbox Entirely | daily.dev og:description: CVE-2026-5674 is a CVSS 8.8 sandbox escape in PipeWire's PulseAudio compatibility layer. Three chained flaws enable the exploit: the authentication cookie is... og:url: https://daily.dev/posts/a-skipped-cookie-check-let-flatpak-apps-escape-pipewire-s-sandbox-entirely-i32pfsskc og:image: https://api.daily.dev/og/posts/i32PfSskc.png og:image:alt: A Skipped Cookie Check Let Flatpak Apps Escape PipeWire’s Sandbox Entirely og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # A Skipped Cookie Check Let Flatpak Apps Escape PipeWire’s Sandbox Entirely **[Latest Hacking News](https://daily.dev/sources/lhn)** · 5 min read · 0 upvotes · 0 comments ## Summary CVE-2026-5674 is a CVSS 8.8 sandbox escape in PipeWire's PulseAudio compatibility layer. Three chained flaws enable the exploit: the authentication cookie is read but never verified, module loading is enabled by default for 'authenticated' clients, and module-ladspa-sink calls dlopen() on arbitrary paths without validation. A Flatpak app with only --socket=pulseaudio permission can write a malicious shared library to /tmp, send a junk cookie, load the module pointing at that library, and achieve arbitrary code execution as the logged-in user — no elevated privileges or race conditions required. Discovered by Johann Rehberger using an AI-assisted research pipeline (Claude Code/Opus), the bug was confirmed on PipeWire 1.0.5, reported to Red Hat on April 5, and patched by restricting dlopen() from loading libraries off arbitrary absolute paths. Red Hat shipped RHSA-2026:47083 on July 28. Defenders should patch PipeWire, audit Flatpak apps requesting --socket=pulseaudio with filesystem access, and strip unnecessary permissions. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What is CVE-2026-5674 and how does it let a Flatpak app escape its sandbox? It is a PipeWire vulnerability (CVSS 8.8) where the PulseAudio compatibility shim reads a client's 256-byte authentication cookie but never actually compares it, so any connection counts as authenticated. Combined with pulse.allow-module-loading defaulting to on and module-ladspa-sink calling dlopen() on an arbitrary plugin path, a Flatpak app with only pulseaudio socket access can load a malicious shared library and run code as the logged-in user. _Anyone auditing Flatpak sandbox permissions can track fixes like this PipeWire escape on daily.dev._ ### How do I fix or mitigate the PipeWire sandbox escape vulnerability affecting Flatpak apps? Patch PipeWire to a build after the April hardening commits, which restrict dlopen() from loading libraries off arbitrary absolute paths. Red Hat shipped RHSA-2026:47083 on July 28, updating to pipewire-1.4.11 on RHEL 10. Confirm the dlopen() restriction specifically rather than trusting a bumped version number, and audit Flatpak apps that combine --socket=pulseaudio with writable filesystem access, like Discord's Flathub package. _Sysadmins patching Linux desktop fleets can keep up with fixes like this via daily.dev._ ### How was the PipeWire PulseAudio authentication bypass bug discovered? Researcher Johann Rehberger at Embrace The Red found it using an automated research pipeline built around Claude Code and Claude Opus 4.6, confirming it against PipeWire 1.0.5 on April 3 and reproducing it on Debian 13 and Ubuntu 24.04 within two days. The underlying flaw was a plain logic error in the cookie comparison, the kind static analysis or manual review could also have caught. _Developers curious about AI-assisted vulnerability hunting can follow cases like this on daily.dev._ ## Similar posts on daily.dev - [Escaping Linux Sandboxes via PipeWire \(CVE-2026-5674\) · Embrace The Red](https://daily.dev/posts/escaping-linux-sandboxes-via-pipewire-cve-2026-5674-embrace-the-red-x9e0vsjk1) · Embrace The Red · 1 upvotes · 0 comments - [Arbitrary code execution breaking sandboxes in KDE Plasma](https://daily.dev/posts/arbitrary-code-execution-breaking-sandboxes-in-kde-plasma-dgv9mu1kd) · Lobsters · 2 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#linux](https://daily.dev/tags/linux) [View this post on daily.dev](https://daily.dev/posts/a-skipped-cookie-check-let-flatpak-apps-escape-pipewire-s-sandbox-entirely-i32pfsskc) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"A Skipped Cookie Check Let Flatpak Apps Escape PipeWire’s Sandbox Entirely","url":"https://daily.dev/posts/a-skipped-cookie-check-let-flatpak-apps-escape-pipewire-s-sandbox-entirely-i32pfsskc","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/a-skipped-cookie-check-let-flatpak-apps-escape-pipewire-s-sandbox-entirely-i32pfsskc"},"datePublished":"2026-08-02T11:06:58.901Z","dateModified":"2026-09-14T07:03:40.849Z","description":"CVE-2026-5674 is a CVSS 8.8 sandbox escape in PipeWire's PulseAudio compatibility layer. Three chained flaws enable the exploit: the authentication cookie is...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/dd6910099093217cfa20ccf634a4320c?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/dd6910099093217cfa20ccf634a4320c?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Latest Hacking News","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Latest Hacking News","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/5110318ded6e43f1bb12facdeb2b1965","url":"https://daily.dev/sources/lhn"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/a-skipped-cookie-check-let-flatpak-apps-escape-pipewire-s-sandbox-entirely-i32pfsskc","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,linux","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Latest Hacking News","item":"https://daily.dev/sources/lhn"},{"@type":"ListItem","position":3,"name":"A Skipped Cookie Check Let Flatpak Apps Escape PipeWire’s Sandbox Entirely"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/a-skipped-cookie-check-let-flatpak-apps-escape-pipewire-s-sandbox-entirely-i32pfsskc#faq","mainEntity":[{"@type":"Question","name":"What is CVE-2026-5674 and how does it let a Flatpak app escape its sandbox?","acceptedAnswer":{"@type":"Answer","text":"It is a PipeWire vulnerability (CVSS 8.8) where the PulseAudio compatibility shim reads a client's 256-byte authentication cookie but never actually compares it, so any connection counts as authenticated. Combined with pulse.allow-module-loading defaulting to on and module-ladspa-sink calling dlopen() on an arbitrary plugin path, a Flatpak app with only pulseaudio socket access can load a malicious shared library and run code as the logged-in user. Anyone auditing Flatpak sandbox permissions can track fixes like this PipeWire escape on daily.dev."}},{"@type":"Question","name":"How do I fix or mitigate the PipeWire sandbox escape vulnerability affecting Flatpak apps?","acceptedAnswer":{"@type":"Answer","text":"Patch PipeWire to a build after the April hardening commits, which restrict dlopen() from loading libraries off arbitrary absolute paths. Red Hat shipped RHSA-2026:47083 on July 28, updating to pipewire-1.4.11 on RHEL 10. Confirm the dlopen() restriction specifically rather than trusting a bumped version number, and audit Flatpak apps that combine --socket=pulseaudio with writable filesystem access, like Discord's Flathub package. Sysadmins patching Linux desktop fleets can keep up with fixes like this via daily.dev."}},{"@type":"Question","name":"How was the PipeWire PulseAudio authentication bypass bug discovered?","acceptedAnswer":{"@type":"Answer","text":"Researcher Johann Rehberger at Embrace The Red found it using an automated research pipeline built around Claude Code and Claude Opus 4.6, confirming it against PipeWire 1.0.5 on April 3 and reproducing it on Debian 13 and Ubuntu 24.04 within two days. The underlying flaw was a plain logic error in the cookie comparison, the kind static analysis or manual review could also have caught. Developers curious about AI-assisted vulnerability hunting can follow cases like this on daily.dev."}}]} ```