CVE-2026-41651 | PackageKit up to 1.3.4 src/pk-transaction.c InstallFiles toctou

A vulnerability has been found in PackageKit up to 1.3.4 and classified as problematic. This impacts the function InstallFiles of the file src/pk-transaction.c. Performing a manipulation results in time-of-check time-of-use.

This vulnerability is identified as CVE-2026-41651. The attack is only possible with local access. There is not any exploit available.

The affected component should be upgraded.