Hacker News

Favorites Setup
Comment by delamon | original | Arbitrary code execution in QubesOS via copy-to-VM error reporting backchannel
[−]delamon · 2026-08-30 Sun 10:13 UTC · link
The code is sloppy. They check existance of kdialog binary using full path; next step they rely on PATH search by shell. If would've been much safer to just do execve directly.