CVE catalog
CVE-2026-57964
spice-vdagent: CVE-2026-57964
- Severity
- Medium · CVSS 5.3
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L - Published
- Source
- [NVD] · [CVE record]
A flaw was found in spice-vdagent. On macOS and BSD platforms, an unprivileged local user can bypass authentication by connecting to the Unix Domain Socket Client/Server (UDSCS) socket. This allows the unauthorized user to receive host-to-guest messages, including clipboard data and file transfers, inject clipboard data to the SPICE host, and prevent the legitimate agent from functioning. spice-vdagent: Authentication bypass on macOS/BSD due to dummy session info Red Hat products are not affected by this CVE as the vulnerable code is not present in Red Hat's shipped versions of `spice-vdagent`. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | spice-vdagent | sid | 0.23.0-4 | not affected |
| Debian | spice-vdagent | forky | 0.23.0-4 | not affected |
| Debian | spice-vdagent | trixie | 0.22.1-4.1 | not affected |
| Debian | spice-vdagent | bookworm | 0.22.1-3 | not affected |
| Debian | spice-vdagent | bookworm-security | 0.22.1-3+deb12u1 | not affected |
| Ubuntu | spice-vdagent | 25.10 | 0.22.1-4.1 | vulnerable |
| Ubuntu | spice-vdagent | 25.10 | 0.22.1-4.1ubuntu1 | vulnerable |
| Ubuntu | spice-vdagent | 25.10 | 0.22.1-5 | vulnerable |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | spice-vdagent | source | sid | Not affected | unimportant | Not reported | Not reported |
| Debian | spice-vdagent | source | forky | Not affected | unimportant | Not reported | Not reported |
| Debian | spice-vdagent | source | trixie | Not affected | unimportant | Not reported | Not reported |
| Debian | spice-vdagent | source | bookworm | Not affected | unimportant | Not reported | Not reported |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [spice-vdagent]Not affected
Details (4)
0.22.1-3+b2· amd64 · bookwormNot affected
dsa · spice-vdagent · debian · bookworm
0.22.1-3+b2· arm64 · bookwormNot affected
dsa · spice-vdagent · debian · bookworm
0.22.1-3+deb12u1· amd64 · bookworm-securityNot affected
dsa · spice-vdagent · debian · bookworm
0.22.1-3+deb12u1· arm64 · bookworm-securityNot affected
dsa · spice-vdagent · debian · bookworm
Observed: