CVE-2026-19816

Public on 2026-09-11

Modified on 2026-09-11

Description

A flaw was found in PackageKit. In the dnf5 backend, the RepoRemove handler ignores the SIMULATE transaction flag and executes a real package removal, allowing an unprivileged local user to uninstall packages without polkit authorization.

Severity

Important

See what this means

CVSS v3 Base Score

7.1

See breakdown

Affected Packages

Platform	Package	Status
Amazon Linux 2 - Core	PackageKit	Not Affected
Amazon Linux 2023	PackageKit	Not Affected
Amazon Linux 2027 Preview	PackageKit	Pending Fix
Amazon Linux 2 - Core	compat-PackageKit08	Not Affected
Amazon Linux 2 - Core	gnome-packagekit	Not Affected

CVSS Scores

	Score Type	Score	Vector
Amazon Linux	CVSSv3	7.1	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

References

FAQs regarding Amazon Linux ALAS/CVE Severity Red Hat: CVE-2026-19816 Mitre: CVE-2026-19816