CVE-2026-55889 - XDG Desktop Portal: Drag-and-drop and copy-paste theft via predictable FileTransfer key
CVE ID :CVE-2026-55889 Published : Oct. 23, 2026, 1:17 p.m. | 58 minutes ago Description :XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileTransfer.RetrieveFiles method to redirect drag-and-drop and copy-paste data...