CVE-2026-5674 chains a broken PulseAudio auth check, default module loading, and an unrestricted dlopen() into a full PipeWire sandbox escape from inside Flatpak apps like Discord.

A Skipped Cookie Check Let Flatpak Apps Escape PipeWire’s Sandbox Entirely on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses.

Rebecca Sutton

Source: LatestHackingNews
Source Link: https://latesthackingnews.com/2026/08/02/pipewire-sandbox-escape-cve-2026-5674/