Auth bypass in Linux-Gaming Portprotonqt
CVE-2026-59678
An Incorrect Authorization vulnerability in Linux-Gaming PortProtonQt allows any users to mount and unmount arbitrary file systems and modify the network configuration via NetworkManager. This issue affects PortProtonQt before 0d0f0950ebd948cdf82e8c3e1ebd2bcb9b8bafbe.
Vulnerability class: Broken Access Control
EPSS: 0.002 (5.3th percentile) — read the EPSS interpretation.
Affected products
- Linux-gaming Portprotonqt — versions 0