--- title: Escaping Linux Sandboxes via PipeWire (CVE-2026-5674) ·... description: A detailed exploit writeup for CVE-2026-5674, a sandbox escape vulnerability in PipeWire's PulseAudio compatibility layer. The bug chain involves three issues:... canonical: https://daily.dev/posts/escaping-linux-sandboxes-via-pipewire-cve-2026-5674-embrace-the-red-x9e0vsjk1 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Escaping Linux Sandboxes via PipeWire (CVE-2026-5674) · Embrace The Red | daily.dev og:description: A detailed exploit writeup for CVE-2026-5674, a sandbox escape vulnerability in PipeWire's PulseAudio compatibility layer. The bug chain involves three issues:... og:url: https://daily.dev/posts/escaping-linux-sandboxes-via-pipewire-cve-2026-5674-embrace-the-red-x9e0vsjk1 og:image: https://api.daily.dev/og/posts/X9e0VSJK1.png og:image:alt: Escaping Linux Sandboxes via PipeWire (CVE-2026-5674) · Embrace The Red og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Escaping Linux Sandboxes via PipeWire (CVE-2026-5674) · Embrace The Red **[Embrace The Red](https://daily.dev/sources/embracethered)** · 6 min read · 1 upvotes · 0 comments ## Summary A detailed exploit writeup for CVE-2026-5674, a sandbox escape vulnerability in PipeWire's PulseAudio compatibility layer. The bug chain involves three issues: authentication cookies are read but never validated (any 256 bytes pass), module loading is enabled by default, and dlopen() accepts arbitrary paths with no validation. A Flatpak app with only --socket=pulseaudio and write access to /tmp can load a malicious .so into PipeWire (which runs outside the sandbox), achieving full user-context code execution. The vulnerability was discovered using Claude Code and Opus 4.6, confirmed on Fedora, Ubuntu 24.04, and Debian 13, and affects any sandbox tech that mounts the PulseAudio socket — including Docker. CVSS score is 8.8 (High). The fix restricts dlopen() to allowlisted LADSPA plugin directories. Red Hat has released a patch. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What is CVE-2026-5674 and how does it let a Flatpak app escape its sandbox? CVE-2026-5674 is a PipeWire vulnerability (CVSS 8.8) where the PulseAudio compatibility layer never validates the authentication cookie, module loading is enabled by default, and dlopen() loads arbitrary paths via the module-ladspa-sink plugin parameter. A Flatpak app with only pulseaudio and a host-writable path permission can write a malicious .so file, authenticate with garbage bytes, load it as a plugin, and execute its constructor outside the sandbox with full user privileges. _Track sandbox escape CVEs like this one on daily.dev before they hit production systems._ ### How do I fix or mitigate the PipeWire PulseAudio sandbox escape vulnerability? Red Hat's fix restricts dlopen() so it can no longer load libraries from arbitrary absolute paths, limiting LADSPA plugin loading to trusted directories like /usr/lib/ladspa/. Other recommended mitigations include validating the authentication cookie against ~/.config/pulse/cookie and defaulting the allow-module-loading option (available since May 2024) to false. Red Hat shipped a patch for RHEL 10 via RHSA-2026:47083; PipeWire hardening patches landed shortly after disclosure. _Developers patching Linux sandbox and container audio setups can follow fixes like this on daily.dev._ ### Is the PipeWire PulseAudio sandbox escape exploitable through Docker containers too, not just Flatpak? Yes, the same exploit chain works from Docker containers that mount the PulseAudio socket, which is a standard setup for containerized audio. Any sandbox technology that connects a socket to PipeWire, not just Flatpak, is affected because the underlying flaw is in PipeWire's PulseAudio compatibility layer itself, not in Flatpak's sandboxing logic. _Anyone auditing container audio configurations can keep up with escapes like this via daily.dev._ ## Similar posts on daily.dev - [A Skipped Cookie Check Let Flatpak Apps Escape PipeWire’s Sandbox Entirely](https://daily.dev/posts/a-skipped-cookie-check-let-flatpak-apps-escape-pipewire-s-sandbox-entirely-i32pfsskc) · Latest Hacking News · 0 upvotes · 0 comments - [Exploit released for new PinTheft Arch Linux root escalation flaw](https://daily.dev/posts/exploit-released-for-new-pintheft-arch-linux-root-escalation-flaw-gxgv0ijcn) · BleepingComputer · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#linux](https://daily.dev/tags/linux) [View this post on daily.dev](https://daily.dev/posts/escaping-linux-sandboxes-via-pipewire-cve-2026-5674-embrace-the-red-x9e0vsjk1) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Escaping Linux Sandboxes via PipeWire (CVE-2026-5674) · Embrace The Red","url":"https://daily.dev/posts/escaping-linux-sandboxes-via-pipewire-cve-2026-5674-embrace-the-red-x9e0vsjk1","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/escaping-linux-sandboxes-via-pipewire-cve-2026-5674-embrace-the-red-x9e0vsjk1"},"datePublished":"2026-07-30T18:13:04.533Z","dateModified":"2026-09-14T07:52:18.020Z","description":"A detailed exploit writeup for CVE-2026-5674, a sandbox escape vulnerability in PipeWire's PulseAudio compatibility layer. The bug chain involves three issues:...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/78fee944184cdadb897705484e7306ad?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/78fee944184cdadb897705484e7306ad?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Embrace The Red","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Embrace The Red","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/50e27c500f1444fd9ed7d91301ed2e9c","url":"https://daily.dev/sources/embracethered"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/escaping-linux-sandboxes-via-pipewire-cve-2026-5674-embrace-the-red-x9e0vsjk1","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,linux","timeRequired":"PT6M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Embrace The Red","item":"https://daily.dev/sources/embracethered"},{"@type":"ListItem","position":3,"name":"Escaping Linux Sandboxes via PipeWire (CVE-2026-5674) · Embrace The Red"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/escaping-linux-sandboxes-via-pipewire-cve-2026-5674-embrace-the-red-x9e0vsjk1#faq","mainEntity":[{"@type":"Question","name":"What is CVE-2026-5674 and how does it let a Flatpak app escape its sandbox?","acceptedAnswer":{"@type":"Answer","text":"CVE-2026-5674 is a PipeWire vulnerability (CVSS 8.8) where the PulseAudio compatibility layer never validates the authentication cookie, module loading is enabled by default, and dlopen() loads arbitrary paths via the module-ladspa-sink plugin parameter. A Flatpak app with only pulseaudio and a host-writable path permission can write a malicious .so file, authenticate with garbage bytes, load it as a plugin, and execute its constructor outside the sandbox with full user privileges. Track sandbox escape CVEs like this one on daily.dev before they hit production systems."}},{"@type":"Question","name":"How do I fix or mitigate the PipeWire PulseAudio sandbox escape vulnerability?","acceptedAnswer":{"@type":"Answer","text":"Red Hat's fix restricts dlopen() so it can no longer load libraries from arbitrary absolute paths, limiting LADSPA plugin loading to trusted directories like /usr/lib/ladspa/. Other recommended mitigations include validating the authentication cookie against ~/.config/pulse/cookie and defaulting the allow-module-loading option (available since May 2024) to false. Red Hat shipped a patch for RHEL 10 via RHSA-2026:47083; PipeWire hardening patches landed shortly after disclosure. Developers patching Linux sandbox and container audio setups can follow fixes like this on daily.dev."}},{"@type":"Question","name":"Is the PipeWire PulseAudio sandbox escape exploitable through Docker containers too, not just Flatpak?","acceptedAnswer":{"@type":"Answer","text":"Yes, the same exploit chain works from Docker containers that mount the PulseAudio socket, which is a standard setup for containerized audio. Any sandbox technology that connects a socket to PipeWire, not just Flatpak, is affected because the underlying flaw is in PipeWire's PulseAudio compatibility layer itself, not in Flatpak's sandboxing logic. Anyone auditing container audio configurations can keep up with escapes like this via daily.dev."}}]} ```