CVE catalog

CVE-2026-85498

polkit vulnerability

Severity: Low · CVSS 3.9CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L
Published: Sep 4, 2026, 12:00:00 AM UTC
Source: [NVD] · [CVE record]

unknown

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	policykit-1	sid	`128-1`	vulnerable
Debian	policykit-1	forky	`128-1`	vulnerable
Debian	policykit-1	trixie	`126-2`	not affected
Debian	policykit-1	bookworm	`122-3`	not affected
Ubuntu	policykit-1	noble	`124-2ubuntu1.24.04.4`	fixed
Ubuntu	gir1.2-polkit-1.0	noble	`124-2ubuntu1.24.04.4`	fixed
Ubuntu	libpolkit-agent-1-0	noble	`124-2ubuntu1.24.04.4`	fixed
Ubuntu	libpolkit-agent-1-dev	noble	`124-2ubuntu1.24.04.4`	fixed
Ubuntu	libpolkit-gobject-1-0	noble	`124-2ubuntu1.24.04.4`	fixed
Ubuntu	libpolkit-gobject-1-dev	noble	`124-2ubuntu1.24.04.4`	fixed
Ubuntu	pkexec	noble	`124-2ubuntu1.24.04.4`	fixed
Ubuntu	policykit-1-doc	noble	`124-2ubuntu1.24.04.4`	fixed
Ubuntu	polkitd	noble	`124-2ubuntu1.24.04.4`	fixed
Ubuntu	polkitd-pkla	noble	`124-2ubuntu1.24.04.4`	fixed
Ubuntu	policykit-1	22.04	`0.105-31`	vulnerable
Ubuntu	policykit-1	22.04	`0.105-31ubuntu1`	vulnerable
Ubuntu	policykit-1	22.04	`0.105-31.1`	vulnerable
Ubuntu	policykit-1	22.04	`0.105-32`	vulnerable
Ubuntu	policykit-1	22.04	`0.105-33`	vulnerable
Ubuntu	policykit-1	22.04	`0.105-33ubuntu0.1`	vulnerable
Ubuntu	policykit-1	22.04	`0.105-33ubuntu0.2`	fixed
Ubuntu	policykit-1	24.04	`123-1`	vulnerable
Ubuntu	policykit-1	24.04	`123-3`	vulnerable
Ubuntu	policykit-1	24.04	`124-1`	vulnerable
Ubuntu	policykit-1	24.04	`124-1ubuntu1`	vulnerable
Ubuntu	policykit-1	24.04	`124-2ubuntu1`	vulnerable
Ubuntu	policykit-1	24.04	`124-2ubuntu1.24.04.2`	vulnerable
Ubuntu	policykit-1	24.04	`124-2ubuntu1.24.04.3`	vulnerable
Ubuntu	policykit-1	24.04	`124-2ubuntu1.24.04.4`	fixed
Ubuntu	policykit-1	26.04	`126-2`	vulnerable
Ubuntu	policykit-1	26.04	`127-1`	vulnerable
Ubuntu	policykit-1	26.04	`127-2`	vulnerable
Ubuntu	policykit-1	26.04	`127-2ubuntu1`	vulnerable
Ubuntu	policykit-1	26.04	`127-2ubuntu1.1`	fixed
Ubuntu	policykit-1	pro	`0.105-11ubuntu2`	vulnerable
Ubuntu	policykit-1	pro	`0.105-13`	vulnerable
Ubuntu	policykit-1	pro	`0.105-13ubuntu1`	vulnerable
Ubuntu	policykit-1	pro	`0.105-14`	vulnerable
Ubuntu	policykit-1	pro	`0.105-14.1`	vulnerable
Ubuntu	policykit-1	pro	`0.105-14.1ubuntu0.1`	vulnerable
Ubuntu	policykit-1	pro	`0.105-14.1ubuntu0.4`	vulnerable
Ubuntu	policykit-1	pro	`0.105-14.1ubuntu0.5`	vulnerable
Ubuntu	policykit-1	pro	`0.105-14.1ubuntu0.5+esm1`	vulnerable
Ubuntu	policykit-1	18.04	`0.105-18`	vulnerable
Ubuntu	policykit-1	18.04	`0.105-20`	vulnerable
Ubuntu	policykit-1	18.04	`0.105-20ubuntu0.18.04.1`	vulnerable
Ubuntu	policykit-1	18.04	`0.105-20ubuntu0.18.04.4`	vulnerable
Ubuntu	policykit-1	18.04	`0.105-20ubuntu0.18.04.5`	vulnerable
Ubuntu	policykit-1	18.04	`0.105-20ubuntu0.18.04.6`	vulnerable
Ubuntu	policykit-1	20.04	`0.105-26ubuntu1`	vulnerable
Ubuntu	policykit-1	20.04	`0.105-26ubuntu1.1`	vulnerable
Ubuntu	policykit-1	20.04	`0.105-26ubuntu1.2`	vulnerable
Ubuntu	policykit-1	20.04	`0.105-26ubuntu1.3`	vulnerable
Ubuntu	policykit-1	22.04	`0.105-31`	vulnerable
Ubuntu	policykit-1	22.04	`0.105-31ubuntu1`	vulnerable
Ubuntu	policykit-1	22.04	`0.105-31.1`	vulnerable
Ubuntu	policykit-1	22.04	`0.105-32`	vulnerable
Ubuntu	policykit-1	22.04	`0.105-33`	vulnerable
Ubuntu	policykit-1	22.04	`0.105-33ubuntu0.1`	vulnerable
Ubuntu	policykit-1	22.04	`0.105-33ubuntu0.2`	fixed
Ubuntu	policykit-1	24.04	`123-1`	vulnerable
Ubuntu	policykit-1	24.04	`123-3`	vulnerable
Ubuntu	policykit-1	24.04	`124-1`	vulnerable
Ubuntu	policykit-1	24.04	`124-1ubuntu1`	vulnerable
Ubuntu	policykit-1	24.04	`124-2ubuntu1`	vulnerable
Ubuntu	policykit-1	24.04	`124-2ubuntu1.24.04.2`	vulnerable
Ubuntu	policykit-1	24.04	`124-2ubuntu1.24.04.3`	vulnerable
Ubuntu	policykit-1	24.04	`124-2ubuntu1.24.04.4`	fixed
Ubuntu	policykit-1	26.04	`126-2`	vulnerable
Ubuntu	policykit-1	26.04	`127-1`	vulnerable
Ubuntu	policykit-1	26.04	`127-2`	vulnerable
Ubuntu	policykit-1	26.04	`127-2ubuntu1`	vulnerable
Ubuntu	policykit-1	26.04	`127-2ubuntu1.1`	fixed
Opensuse	polkit	tumbleweed	`128-1.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	policykit-1	source	sid	`(unfixed)`	not yet assigned	Not reported	[1149960]
Debian	policykit-1	source	forky	`(unfixed)`	not yet assigned	Not reported	[1149960]
Debian	policykit-1	source	trixie	`Not affected`	unimportant	Not reported	[1149960]
Debian	policykit-1	source	bookworm	`Not affected`	unimportant	Not reported	[1149960]
Ubuntu	policykit-1	deb	noble	`124-2ubuntu1.24.04.4`	Not reported	Not reported	Not reported
Ubuntu	gir1.2-polkit-1.0	deb	noble	`124-2ubuntu1.24.04.4`	Not reported	Not reported	Not reported
Ubuntu	libpolkit-agent-1-0	deb	noble	`124-2ubuntu1.24.04.4`	Not reported	Not reported	Not reported
Ubuntu	libpolkit-agent-1-dev	deb	noble	`124-2ubuntu1.24.04.4`	Not reported	Not reported	Not reported
Ubuntu	libpolkit-gobject-1-0	deb	noble	`124-2ubuntu1.24.04.4`	Not reported	Not reported	Not reported
Ubuntu	libpolkit-gobject-1-dev	deb	noble	`124-2ubuntu1.24.04.4`	Not reported	Not reported	Not reported
Ubuntu	pkexec	deb	noble	`124-2ubuntu1.24.04.4`	Not reported	Not reported	Not reported
Ubuntu	policykit-1-doc	deb	noble	`124-2ubuntu1.24.04.4`	Not reported	Not reported	Not reported
Ubuntu	polkitd	deb	noble	`124-2ubuntu1.24.04.4`	Not reported	Not reported	Not reported
Ubuntu	polkitd-pkla	deb	noble	`124-2ubuntu1.24.04.4`	Not reported	Not reported	Not reported
Ubuntu	policykit-1	deb	22.04	`0.105-33ubuntu0.2`	Not reported	USN-8762-1	Not reported
Ubuntu	policykit-1	deb	24.04	`124-2ubuntu1.24.04.4`	Not reported	USN-8762-1	Not reported
Ubuntu	policykit-1	deb	26.04	`127-2ubuntu1.1`	Not reported	USN-8762-1	Not reported
Ubuntu	policykit-1	deb	22.04	`0.105-33ubuntu0.2`	Not reported	UBUNTU-CVE-2026-85498	Not reported
Ubuntu	policykit-1	deb	24.04	`124-2ubuntu1.24.04.4`	Not reported	UBUNTU-CVE-2026-85498	Not reported
Ubuntu	policykit-1	deb	26.04	`127-2ubuntu1.1`	Not reported	UBUNTU-CVE-2026-85498	Not reported
Opensuse	polkit	rpm	tumbleweed	`128-1.1`	Not reported	OPENSUSE-SU-2026:12203-1	Not reported

[Debian bug #1149960]

OpenFactory catalog packages

[openSUSE Tumbleweed]

[polkit]Affected
Source package: [polkit]
Details (1)
- 127-7.2 · x86_64 · tumbleweed
  Affected · Fixed: 128-1.1
  usn · polkit · opensuse · tumbleweed
[libpolkit-agent-1-0]Unknown
Source package: [polkit]
Details (1)
- 127-7.2 · x86_64 · tumbleweed
  Unknown · Fixed: 128-1.1
  Version impact unknown
  usn · polkit · opensuse · tumbleweed
[libpolkit-agent-1-0-32bit]Unknown
Source package: [polkit]
Details (1)
- 127-7.2 · x86_64 · tumbleweed
  Unknown · Fixed: 128-1.1
  Version impact unknown
  usn · polkit · opensuse · tumbleweed
[libpolkit-gobject-1-0]Unknown
Source package: [polkit]
Details (1)
- 127-7.2 · x86_64 · tumbleweed
  Unknown · Fixed: 128-1.1
  Version impact unknown
  usn · polkit · opensuse · tumbleweed
[libpolkit-gobject-1-0-32bit]Unknown
Source package: [polkit]
Details (1)
- 127-7.2 · x86_64 · tumbleweed
  Unknown · Fixed: 128-1.1
  Version impact unknown
  usn · polkit · opensuse · tumbleweed
[pkexec]Unknown
Source package: [polkit]
Details (1)
- 127-7.2 · x86_64 · tumbleweed
  Unknown · Fixed: 128-1.1
  Version impact unknown
  usn · polkit · opensuse · tumbleweed
[polkit-devel]Unknown
Source package: [polkit]
Details (1)
- 127-7.2 · x86_64 · tumbleweed
  Unknown · Fixed: 128-1.1
  Version impact unknown
  usn · polkit · opensuse · tumbleweed
[polkit-doc]Unknown
Source package: [polkit]
Details (1)
- 127-7.2 · noarch · tumbleweed
  Unknown · Fixed: 128-1.1
  Version impact unknown
  usn · polkit · opensuse · tumbleweed
[typelib-1_0-Polkit-1_0]Unknown
Source package: [polkit]
Details (1)
- 127-7.2 · x86_64 · tumbleweed
  Unknown · Fixed: 128-1.1
  Version impact unknown
  usn · polkit · opensuse · tumbleweed

[Debian 12 (Bookworm)]

[gir1.2-polkit-1.0]Not affected
Source package: [policykit-1]
Details (2)
- 122-3 · amd64 · bookworm
  Not affected
  usn · policykit-1 · debian · bookworm
- 122-3 · arm64 · bookworm
  Not affected
  usn · policykit-1 · debian · bookworm
[libpolkit-agent-1-0]Not affected
Source package: [policykit-1]
Details (2)
- 122-3 · amd64 · bookworm
  Not affected
  usn · policykit-1 · debian · bookworm
- 122-3 · arm64 · bookworm
  Not affected
  usn · policykit-1 · debian · bookworm
[libpolkit-agent-1-dev]Not affected
Source package: [policykit-1]
Details (2)
- 122-3 · amd64 · bookworm
  Not affected
  usn · policykit-1 · debian · bookworm
- 122-3 · arm64 · bookworm
  Not affected
  usn · policykit-1 · debian · bookworm
[libpolkit-gobject-1-0]Not affected
Source package: [policykit-1]
Details (2)
- 122-3 · amd64 · bookworm
  Not affected
  usn · policykit-1 · debian · bookworm
- 122-3 · arm64 · bookworm
  Not affected
  usn · policykit-1 · debian · bookworm
[libpolkit-gobject-1-dev]Not affected
Source package: [policykit-1]
Details (2)
- 122-3 · amd64 · bookworm
  Not affected
  usn · policykit-1 · debian · bookworm
- 122-3 · arm64 · bookworm
  Not affected
  usn · policykit-1 · debian · bookworm
[pkexec]Not affected
Source package: [policykit-1]
Details (2)
- 122-3 · amd64 · bookworm
  Not affected
  usn · policykit-1 · debian · bookworm
- 122-3 · arm64 · bookworm
  Not affected
  usn · policykit-1 · debian · bookworm
[policykit-1]Not affected
Details (2)
- 122-3 · amd64 · bookworm
  Not affected
  usn · policykit-1 · debian · bookworm
- 122-3 · arm64 · bookworm
  Not affected
  usn · policykit-1 · debian · bookworm
[policykit-1-doc]Not affected
Source package: [policykit-1]
Details (2)
- 122-3 · all · bookworm
  Not affected
  usn · policykit-1 · debian · bookworm
- 122-3 · all · bookworm
  Not affected
  usn · policykit-1 · debian · bookworm
[polkitd]Not affected
Source package: [policykit-1]
Details (2)
- 122-3 · amd64 · bookworm
  Not affected
  usn · policykit-1 · debian · bookworm
- 122-3 · arm64 · bookworm
  Not affected
  usn · policykit-1 · debian · bookworm
[polkitd-javascript]Not affected
Source package: [policykit-1]
Details (2)
- 122-3 · amd64 · bookworm
  Not affected
  usn · policykit-1 · debian · bookworm
- 122-3 · arm64 · bookworm
  Not affected
  usn · policykit-1 · debian · bookworm
[polkitd-pkla]Not affected
Source package: [policykit-1]
Details (2)
- 122-3 · amd64 · bookworm
  Not affected
  usn · policykit-1 · debian · bookworm
- 122-3 · arm64 · bookworm
  Not affected
  usn · policykit-1 · debian · bookworm

Observed: Oct 23, 2026, 9:29:13 PM UTC

References

[Debian Security Tracker] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]