CVE-2026-96425: Ubports Lomiri-Download-Manager

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

Incorrect DBus policy for lomiri-download-manager allows arbitrary user to run arbitrary command as root over DBus

Affected products

• Ubports Lomiri-Download-Manager: from 0.1.0, before 0.3.3 (fixed in 0.3.3)

Published 2026-10-16. Last modified 2026-10-16.