Critical Command Injection Vulnerability in Ubuntu Kylin Software Center

• •A command injection vulnerability allows local users to gain root access via D-Bus.
• •Exploitation involves unsanitized inputs in the `copy_file_to_install` method.
• •An update adds signature verification but does not fully resolve the underlying issue.

A command injection vulnerability was identified in the Ubuntu Kylin Software Center's D-Bus method, allowing unprivileged local users to execute arbitrary commands with root privileges. The flaw arises from the use of `os.system()` with unsanitized user inputs, specifically the `src_path` and `app_fullname` parameters. An attacker could exploit this by crafting a malicious input, potentially modifying system files like `/etc/sudoers.d/`. The vulnerability is categorized as a local privilege escalation issue. An update has been released to implement cryptographic signature verification to mitigate the risk, but the underlying command injection issue remains unaddressed. Users are advised to update their systems to the latest package versions to apply the fix. The vulnerability affects all users of the Ubuntu Kylin Software Center who have access to the D-Bus service.