The vulnerability appears in PackageKit versions up to 1.3.5, where the API function g_file_test in src/pk-transaction.c processes a frontend‑socket argument without performing proper authorization checks. Because the flaw resides in the handling of the frontend‑socket, an attacker who can reach that socket can supply a crafted argument, causing g_file_test to bypass standard permission validation. The flaw is classified as improper authorization (CWE‑266, CWE‑285) and can be exploited from a remote host.

Any installation of PackageKit that uses a version 1.3.5 or earlier is affected. Since PackageKit is an open‑source project packaged by many Linux distributions, the vulnerability applies across all such distributions. The impact is not limited to a specific vendor; any system that exposes the PackageKit daemon over a network socket is potentially vulnerable.

The CVSS score of 5.3 indicates medium severity. The EPSS score is not available, so the probability of exploitation in the wild is uncertain. The flaw is not listed in CISA’s KEV catalog. Attackers with network access to the vulnerable frontend‑socket can exploit the improper authorization to perform actions beyond what is normally permitted by PackageKit. The CVE description does not specify the exact nature of these actions, so the impact could involve confidentiality, integrity, or availability of the system. Because the exploit has been publicly disclosed, administrators should consider the vulnerability potentially active.