CVE-2026-81686: Dbus Properties Set Missing Sender Authorizationcve-2026-81686-dbus-properties-set-missing-sender-authorization
The D-Bus Properties.Set method is defined without specifying `sender_keyword` in `@dbus.service.method`. Without the caller's sender identifier, the service cannot perform caller authentication or authorization (such as polkit checks), allowing unauthorized users on the bus to mutate sensitive service properties.
