CVE-2026-48831 Details
Description
Wine ships a .desktop file that registers itself as a MIME handler for EXE files and several other Windows executable file types. In some configurations, handling of an EXE file causes that file to be blindly executed with the permissions of the invoker. This allows escaping Flatpak and Snap sandboxes, because MIME handlers are not intended for use by code interpreters and loaders. NOTE: some parties feel that this is not a bug to be addressed in Wine, because there is no known solution that avoids a severe loss of usability (Wine could be a binfmt-misc handler, but binfmt-misc does not exist on all platforms supported by Wine).
A vulnerability exists in Wine due to its registration as a MIME handler for Windows executable file types, including EXE, MSI, and BAT files. This registration can lead to arbitrary code execution with the privileges of the user who invoked Wine. The issue is particularly concerning in Flatpak and Snap environments, where sandboxed applications can use D-Bus to open files with their default applications, potentially executing malicious code outside the sandbox. The vulnerability arises because Wine's MIME handling contradicts established guidelines that advise against executing code when opening files, creating a risk of unintended code execution.
Users can manually unregister Wine as a MIME handler for executable files, or ensure that Wine is installed in a sandboxed environment where it cannot affect other applications. Additionally, packaging systems could be modified to disable Wine's EXE file associations when Wine is installed in a sandbox.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed May 24, 2026CISA-ADP
Assessed May 26, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| http://www.openwall.com/lists/oss-security/2026/05/25/1 | CVE | Mailing List |
| https://bugs.winehq.org/show_bug.cgi?id=59767 | [email protected] | Issue TrackingTechnical DescriptionVendor |
| https://www.openwall.com/lists/oss-security/2026/05/19/1 | [email protected] | Mailing List |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-669 | Incorrect Resource Transfer Between Spheres | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Wine | 11.9 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 23, 2026 | CVE Translated | [email protected] |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 25, 2026 | CVE Modified | CVE |
| May 24, 2026 | New CVE Received | [email protected] |