CVE-2026-96424: Ubports Lomiri-Download-Manager

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

Incorrect DBus policy for lomiri-upload-manager (part of lomiri-download-manager) allows arbitrary user to read arbitrary file as root over DBus

Affected products

• Ubports Lomiri-Download-Manager: from 0.1.0, before 0.3.3 (fixed in 0.3.3)

Published 2026-10-16. Last modified 2026-10-16.