{"action":"Upgrade zbus_polkit to 5.1.0 or later.","affected":[{"fixed":"5.1.0","introduced":"0.0.0-0"}],"component":"zbus_polkit","cve_ids":["CVE-2026-78422"],"ecosystem":"crates.io","epss":0.00125,"exploited":false,"fixed_versions":["5.1.0"],"id":"tcs_01M5KFC5WAMQKPQGND83BEHWNH","modified_at":"2026-09-02T09:15:02.887263895Z","published_at":"2026-08-31T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2026-0278","https://crates.io/crates/zbus_polkit","https://rustsec.org/advisories/RUSTSEC-2026-0278.html","https://github.com/z-galaxy/zbus_polkit/pull/101","https://bugzilla.suse.com/show_bug.cgi?id=1277659"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2026-0278","url":"https://osv.dev/vulnerability/RUSTSEC-2026-0278"}],"summary":"`zbus_polkit`: authorization bypass via PID reuse"}