Hacker News
Favorites
Setup
☰
Home
Favorites
Setup
Comment by delamon |
original
|
Arbitrary code execution in QubesOS via copy-to-VM error reporting backchannel
[−]
delamon
· 2026-08-30 Sun 10:13 UTC ·
link
fave
The code is sloppy. They check existance of kdialog binary using full path; next step they rely on PATH search by shell. If would've been much safer to just do execve directly.