Incorrect Authorization in PortProtonQt Polkit Rule (CVE-2026-59678)

A custom Polkit rule in PortProtonQt allows arbitrary local users to modify NetworkManager connections and mount/unmount file systems via UDisks2, due to an insecure command-line check that can be bypassed. This can lead to denial of service and compromise of system integrity. Affected versions: - 0.1.12 - 1.3.0 We recommend updating to: 1.3.1. CVSS 7.1 · our assessment: this_week Reference: https://seclists.org/oss-sec/2026/q3/204 Details: https://vuln.today/cve/CVE-2026-59678