PT-2026-63578 · Linux Gaming · Portprotonqt

Matthias Gerstner · CVE-2026-59678 · Published 2026-07-23 · Updated 2026-07-23

Mitre

CVSS v4.0

7.1

High

Base vector

AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N

An Incorrect Authorization vulnerability in Linux-Gaming PortProtonQt allows any users to mount and unmount arbitrary file systems and modify the network configuration via NetworkManager.

This issue affects PortProtonQt before 0d0f0950ebd948cdf82e8c3e1ebd2bcb9b8bafbe.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2026-59678

Affected Products

Portprotonqt

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-59678 · Security Note
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-59678 · Note