Linux Audio Flaw in PipeWire Lets Sandboxed Apps Break Out and Reach Your Files

A security researcher has described a sandbox escape in PipeWire, the default audio server on modern Linux desktops such as Fedora, Ubuntu 24.04 and later, and Debian 13. Tracked as CVE-2026-5674, the flaw means a Flatpak app that only asks for normal audio access can break out of its sandbox and gain full access to the user's desktop, files and credentials. The researcher says the same attack applies to other Linux sandbox technologies that connect a socket to PipeWire, such as Docker. He found the bug in April 2026 using an automated research pipeline built on Claude Code, confirmed it by hand, and reported it to Red Hat.

The escape depends on three separate issues. First, PipeWire's PulseAudio compatibility layer reads an authentication token from the client and checks only its length, then discards it, so any value of the right size is accepted. The researcher says this has been the behaviour since the compatibility layer was first built. Second, any client treated as authenticated can ask the server to load modules. A setting to restrict this was added in May 2024, but it is on by default. Third, one of those modules loads a plugin from a path the client supplies, with no checks on where it comes from, so a malicious library can run code immediately.

This article is based on the opening of the researcher's post, so it does not cover patch status or fixes. Businesses running Linux desktops, or containers that expose PipeWire, should watch for vendor advisories on CVE-2026-5674.