Auth bypass in Linux-gaming Portprotonqt

CVE-2026-59678

An Incorrect Authorization vulnerability in Linux-Gaming PortProtonQt allows any users to mount and unmount arbitrary file systems and modify the network configuration via NetworkManager. This issue affects PortProtonQt before 0d0f09…

Vulnerability class: Broken Access Control

Affected products

Weakness classification (CWE)

References