# CVE-2026-5674: PipeWire sandbox escape via PulseAudio compatibility layer

Source: https://junglewise.ai/threats/cve-2026-5674-pipewire-sandbox-escape-via-pulseaudio-compatibility-layer  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-16. Updated: 2026-07-16  
License: CC BY 4.0 with a link back

CVE-2026-5674 · Severity: high · CVSS 8.8 · Published 2026-07-16

PipeWire is a multimedia server used in Linux operating systems to manage audio and video streams. A security flaw in its PulseAudio compatibility layer allows a malicious application to break out of its restricted 'sandbox' (such as Flatpak) and execute code on the host system. This could allow an attacker to bypass security boundaries, access private user data, and take full control of the user's session.

Technologies: [Red Hat Enterprise Linux 10](https://junglewise.ai/threats/technologies/enterprise-linux-10), [Red Hat Enterprise Linux 9](https://junglewise.ai/threats/technologies/enterprise-linux-9). Vendors: [Red Hat](https://junglewise.ai/threats/vendors/red-hat).

## Quick answers

**Is CVE-2026-5674 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-5674 being exploited in the wild.

**How severe is CVE-2026-5674?** High severity, with a CVSS score of 8.8, published 16 July 2026.

**Which products and versions are affected?** Red Hat Enterprise Linux 10 affected; Red Hat Enterprise Linux 9 affected.

**Is there a fix for CVE-2026-5674?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-5674 attacked?** It is attacked with local access, in an operating system.

**Am I affected by CVE-2026-5674?** Check whether you run Red Hat Enterprise Linux 10 or Red Hat Enterprise Linux 9 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A vulnerability classified as CWE-427 (Uncontrolled Search Path Element) exists in PipeWire's PulseAudio compatibility layer, specifically within 'module-protocol-pulse' and 'module-ladspa-sink'. An attacker within a sandboxed environment (e.g., Flatpak) with access to the PulseAudio socket and a writable host-visible directory can load a malicious shared library (.so) via the PA_COMMAND_LOAD_MODULE command. Because PipeWire executes outside the sandbox and calls dlopen() on the provided path without sufficient path validation, the library's constructor executes in the full context of the user session. Mitigations include setting 'pulse.allow-module-loading = false' or restricting dlopen() paths to trusted system directories.

## Affected products

- PipeWire Project PipeWire <= 1.0.5
- Red Hat Red Hat Enterprise Linux 9 affected
- Red Hat Red Hat Enterprise Linux 10 affected

## Timeline

- 2026-04-06: other: Initial report in Red Hat Bugzilla
- 2026-07-16: disclosed: CVE published to NVD

## References

- [https://access.redhat.com/downloads/content/package-browser/](https://access.redhat.com/downloads/content/package-browser/)
- [https://access.redhat.com/security/cve/CVE-2026-5674](https://access.redhat.com/security/cve/CVE-2026-5674)
- [https://bugzilla.redhat.com/show_bug.cgi?id=2455341](https://bugzilla.redhat.com/show_bug.cgi?id=2455341)

## Related threats

- [Red Hat yggdrasil-worker-package-manager argument injection in APT backend](https://junglewise.ai/threats/cve-2026-18157-red-hat-yggdrasil-worker-package-manager-argument-injection-in)
- [Samba AD DC LDAP filter injection and ACL bypass in Compare requests](https://junglewise.ai/threats/cve-2026-58222-samba-ad-dc-ldap-filter-injection-and-acl-bypass-in-compare)
- [Samba KDC out-of-bounds read in kpasswd service](https://junglewise.ai/threats/cve-2026-58216-samba-kdc-out-of-bounds-read-in-kpasswd-service)
- [Samba internal DNS server denial of service via TKEY cache exhaustion](https://junglewise.ai/threats/cve-2026-58218-samba-internal-dns-server-denial-of-service-via-tkey-cache)
- [Red Hat PCP auth bypass in pmproxy /store endpoint](https://junglewise.ai/threats/cve-2026-16527-red-hat-pcp-auth-bypass-in-pmproxy-store-endpoint)