We’re launching Lyria 3.5 in Google Flow Music, with advances across musicality, lyrics, vocals, and creative control
deepmind.google·6d ago
AI Engineering
Lobsters·Jul 3·5 min read
Arbitrary code execution breaking sandboxes in KDE Plasma
TL;DR
A vulnerability exists in KDE Plasma's sandboxing that allows malicious applications to execute arbitrary code on the host system. A proof of concept was created using a Flatpak application, specifically demonstrating how it can spawn the KCalc binary unsandboxed.
✦ Why It Matters
Engineers must evaluate and strengthen sandboxing techniques to mitigate risks of arbitrary code execution.
Key Takeaways
- Review sandboxing mechanisms for vulnerabilities.
- Implement stricter permission controls in applications.
- Test applications in isolated environments regularly.
- Educate users about potential security risks in sandboxed apps.
Full Summary
KDE Plasma's sandboxing mechanisms, particularly when using Flatpak, have been found to be vulnerable to arbitrary code execution. A proof of concept was developed that allows a malicious Flatpak application to impersonate and execute binaries on the host system without proper permissions.
The demonstration utilized an Arch Linux host and required dependencies like wget and unzip to build the malicious binary. By invoking the 'Open New Window' action in the Flatpak app, the KCalc calculator was launched unsandboxed, exposing it to the host's environment.
This exploit underscores the inadequacies in current sandboxing techniques, as it bypasses security contexts meant to isolate applications. The findings suggest that developers need to reassess the security of sandboxed applications to prevent unauthorized access to host resources.