Pcmanfm Qt
Monthly
Improper delegation of file handling in the LXQt PCManFM-Qt file manager (all releases from 1.1.0 through 2.4.0) allows a local attacker to trigger execution of arbitrary handler programs by passing a regular file's path as a URI to the org.freedesktop.FileManager1.ShowFolders D-Bus method, which opens the file with its type-associated program without user confirmation. This can yield code execution or be abused to circumvent network namespace restrictions. EPSS is negligible (0.01%, 2nd percentile) and there is no public exploit identified at time of analysis, but SSVC rates the technical impact as total.
Improper delegation of file handling in the LXQt PCManFM-Qt file manager (all releases from 1.1.0 through 2.4.0) allows a local attacker to trigger execution of arbitrary handler programs by passing a regular file's path as a URI to the org.freedesktop.FileManager1.ShowFolders D-Bus method, which opens the file with its type-associated program without user confirmation. This can yield code execution or be abused to circumvent network namespace restrictions. EPSS is negligible (0.01%, 2nd percentile) and there is no public exploit identified at time of analysis, but SSVC rates the technical impact as total.