# CVE-2026-5674: pipewire: PipeWire is a multimedia server for Linux and other Unix like operating systems.  Security Fix(es):  * pipewire: Pipe...

CVE-2026-5674 is fixed in 28 products on 1 platform, first by DEBIAN-CVE-2026-5674, released July 16, 2026. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2026-5674
- Priority: High
- CVSS: 8.8 (Important)
- EPSS: 0.0019
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jul 4, 2026

## Description

PipeWire is a multimedia server for Linux and other Unix like operating systems.  Security Fix(es):  * pipewire: PipeWire: Sandbox escape and arbitrary code execution via malicious library loading (CVE-2026-5674)  For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | pipewire Debian 14 | 1.6.6-1 | [DEBIAN-CVE-2026-5674](https://patchblox.com/security/data/fix/linux/debian-cve-2026-5674.md) | Jul 16, 2026 |
| Linux | pipewire RHEL 10 | 1.2.7-1.el10_0.1 | [RHSA-2026:51064](https://patchblox.com/security/data/fix/linux/rhsa-2026-51064.md) | Jul 31, 2026 |
| Linux | pipewire RHEL 9 | 0:1.4.11-1.el9_8 | [RHSA-2026:47082](https://patchblox.com/security/data/fix/linux/rhsa-2026-47082.md) | Aug 5, 2026 |
| Linux | pipewire almalinux 10 | 1.4.11-1.el10_2 | [ALSA-2026:47083](https://patchblox.com/security/data/fix/linux/alsa-2026-47083.md) | Jul 28, 2026 |
| Linux | pipewire almalinux 9 | 1.4.11-1.el9_8 | [ALSA-2026:47082](https://patchblox.com/security/data/fix/linux/alsa-2026-47082.md) | Jul 28, 2026 |
| Linux | pipewire amzn 2023 | 1.2.7-4.amzn2023.0.5 | [ALAS2023-2026-2029](https://patchblox.com/security/data/fix/linux/alas2023-2026-2029.md) | Aug 3, 2026 |
| Linux | pipewire ol 10 | 0:1.4.11-1.el10_2 | [ELSA-2026-47083](https://patchblox.com/security/data/fix/linux/elsa-2026-47083.md) | Jul 28, 2026 |
| Linux | pipewire ol 9 | 0:1.4.11-1.el9_8 | [ELSA-2026-47082](https://patchblox.com/security/data/fix/linux/elsa-2026-47082.md) | Aug 12, 2026 |
| Linux | pipewire rocky 10 | 0:1.4.11-1.el10_2 | [RLSA-2026:47083](https://patchblox.com/security/data/fix/linux/rlsa-2026-47083.md) | Jul 29, 2026 |
| Linux | pipewire rocky 9 | 0:1.4.11-1.el9_8 | [RLSA-2026:47082](https://patchblox.com/security/data/fix/linux/rlsa-2026-47082.md) | Aug 3, 2026 |
| Linux | pipewire-alsa RHEL 9 | 0:1.4.11-1.el9_8 | [RHSA-2026:47082](https://patchblox.com/security/data/fix/linux/rhsa-2026-47082.md) | Aug 5, 2026 |
| Linux | pipewire-alsa almalinux 10 | 1.4.11-1.el10_2 | [ALSA-2026:47083](https://patchblox.com/security/data/fix/linux/alsa-2026-47083.md) | Jul 28, 2026 |
| Linux | pipewire-alsa almalinux 9 | 1.4.11-1.el9_8 | [ALSA-2026:47082](https://patchblox.com/security/data/fix/linux/alsa-2026-47082.md) | Jul 28, 2026 |
| Linux | pipewire-alsa amzn 2023 | 1.2.7-4.amzn2023.0.5 | [ALAS2023-2026-2029](https://patchblox.com/security/data/fix/linux/alas2023-2026-2029.md) | Aug 3, 2026 |
| Linux | pipewire-alsa ol 10 | 0:1.4.11-1.el10_2 | [ELSA-2026-47083](https://patchblox.com/security/data/fix/linux/elsa-2026-47083.md) | Jul 28, 2026 |
| Linux | pipewire-alsa ol 9 | 0:1.4.11-1.el9_8 | [ELSA-2026-47082](https://patchblox.com/security/data/fix/linux/elsa-2026-47082.md) | Aug 12, 2026 |
| Linux | pipewire-alsa-debuginfo amzn 2023 | 1.2.7-4.amzn2023.0.5 | [ALAS2023-2026-2029](https://patchblox.com/security/data/fix/linux/alas2023-2026-2029.md) | Aug 3, 2026 |
| Linux | pipewire-config-rates amzn 2023 | 1.2.7-4.amzn2023.0.5 | [ALAS2023-2026-2029](https://patchblox.com/security/data/fix/linux/alas2023-2026-2029.md) | Aug 3, 2026 |
| Linux | pipewire-config-upmix amzn 2023 | 1.2.7-4.amzn2023.0.5 | [ALAS2023-2026-2029](https://patchblox.com/security/data/fix/linux/alas2023-2026-2029.md) | Aug 3, 2026 |
| Linux | pipewire-debuginfo amzn 2023 | 1.2.7-4.amzn2023.0.5 | [ALAS2023-2026-2029](https://patchblox.com/security/data/fix/linux/alas2023-2026-2029.md) | Aug 3, 2026 |
| Linux | pipewire-debugsource amzn 2023 | 1.2.7-4.amzn2023.0.5 | [ALAS2023-2026-2029](https://patchblox.com/security/data/fix/linux/alas2023-2026-2029.md) | Aug 3, 2026 |
| Linux | pipewire-devel RHEL 9 | 0:1.4.11-1.el9_8 | [RHSA-2026:47082](https://patchblox.com/security/data/fix/linux/rhsa-2026-47082.md) | Aug 5, 2026 |
| Linux | pipewire-devel almalinux 10 | 1.4.11-1.el10_2 | [ALSA-2026:47083](https://patchblox.com/security/data/fix/linux/alsa-2026-47083.md) | Jul 28, 2026 |
| Linux | pipewire-devel almalinux 9 | 1.4.11-1.el9_8 | [ALSA-2026:47082](https://patchblox.com/security/data/fix/linux/alsa-2026-47082.md) | Jul 28, 2026 |
| Linux | pipewire-devel amzn 2023 | 1.2.7-4.amzn2023.0.5 | [ALAS2023-2026-2029](https://patchblox.com/security/data/fix/linux/alas2023-2026-2029.md) | Aug 3, 2026 |
| Linux | pipewire-devel ol 10 | 0:1.4.11-1.el10_2 | [ELSA-2026-47083](https://patchblox.com/security/data/fix/linux/elsa-2026-47083.md) | Jul 28, 2026 |
| Linux | pipewire-devel ol 9 | 0:1.4.11-1.el9_8 | [ELSA-2026-47082](https://patchblox.com/security/data/fix/linux/elsa-2026-47082.md) | Aug 12, 2026 |
| Linux | pipewire-doc amzn 2023 | 1.2.7-4.amzn2023.0.5 | [ALAS2023-2026-2029](https://patchblox.com/security/data/fix/linux/alas2023-2026-2029.md) | Aug 3, 2026 |
| Linux | pipewire-gstreamer RHEL 9 | 0:1.4.11-1.el9_8 | [RHSA-2026:47082](https://patchblox.com/security/data/fix/linux/rhsa-2026-47082.md) | Aug 5, 2026 |
| Linux | pipewire-gstreamer almalinux 10 | 1.4.11-1.el10_2 | [ALSA-2026:47083](https://patchblox.com/security/data/fix/linux/alsa-2026-47083.md) | Jul 28, 2026 |
| Linux | pipewire-gstreamer almalinux 9 | 1.4.11-1.el9_8 | [ALSA-2026:47082](https://patchblox.com/security/data/fix/linux/alsa-2026-47082.md) | Jul 28, 2026 |
| Linux | pipewire-gstreamer amzn 2023 | 1.2.7-4.amzn2023.0.5 | [ALAS2023-2026-2029](https://patchblox.com/security/data/fix/linux/alas2023-2026-2029.md) | Aug 3, 2026 |
| Linux | pipewire-gstreamer ol 10 | 0:1.4.11-1.el10_2 | [ELSA-2026-47083](https://patchblox.com/security/data/fix/linux/elsa-2026-47083.md) | Jul 28, 2026 |
| Linux | pipewire-gstreamer ol 9 | 0:1.4.11-1.el9_8 | [ELSA-2026-47082](https://patchblox.com/security/data/fix/linux/elsa-2026-47082.md) | Aug 12, 2026 |
| Linux | pipewire-gstreamer-debuginfo amzn 2023 | 1.2.7-4.amzn2023.0.5 | [ALAS2023-2026-2029](https://patchblox.com/security/data/fix/linux/alas2023-2026-2029.md) | Aug 3, 2026 |
| Linux | pipewire-jack-audio-connection-kit RHEL 9 | 0:1.4.11-1.el9_8 | [RHSA-2026:47082](https://patchblox.com/security/data/fix/linux/rhsa-2026-47082.md) | Aug 5, 2026 |
| Linux | pipewire-jack-audio-connection-kit almalinux 10 | 1.4.11-1.el10_2 | [ALSA-2026:47083](https://patchblox.com/security/data/fix/linux/alsa-2026-47083.md) | Jul 28, 2026 |
| Linux | pipewire-jack-audio-connection-kit almalinux 9 | 1.4.11-1.el9_8 | [ALSA-2026:47082](https://patchblox.com/security/data/fix/linux/alsa-2026-47082.md) | Jul 28, 2026 |
| Linux | pipewire-jack-audio-connection-kit amzn 2023 | 1.2.7-4.amzn2023.0.5 | [ALAS2023-2026-2029](https://patchblox.com/security/data/fix/linux/alas2023-2026-2029.md) | Aug 3, 2026 |
| Linux | pipewire-jack-audio-connection-kit ol 10 | 0:1.4.11-1.el10_2 | [ELSA-2026-47083](https://patchblox.com/security/data/fix/linux/elsa-2026-47083.md) | Jul 28, 2026 |
| Linux | pipewire-jack-audio-connection-kit ol 9 | 0:1.4.11-1.el9_8 | [ELSA-2026-47082](https://patchblox.com/security/data/fix/linux/elsa-2026-47082.md) | Aug 12, 2026 |
| Linux | pipewire-jack-audio-connection-kit-devel RHEL 9 | 0:1.4.11-1.el9_8 | [RHSA-2026:47082](https://patchblox.com/security/data/fix/linux/rhsa-2026-47082.md) | Aug 5, 2026 |
| Linux | pipewire-jack-audio-connection-kit-devel almalinux 10 | 1.4.11-1.el10_2 | [ALSA-2026:47083](https://patchblox.com/security/data/fix/linux/alsa-2026-47083.md) | Jul 28, 2026 |
| Linux | pipewire-jack-audio-connection-kit-devel almalinux 9 | 1.4.11-1.el9_8 | [ALSA-2026:47082](https://patchblox.com/security/data/fix/linux/alsa-2026-47082.md) | Jul 28, 2026 |
| Linux | pipewire-jack-audio-connection-kit-devel amzn 2023 | 1.2.7-4.amzn2023.0.5 | [ALAS2023-2026-2029](https://patchblox.com/security/data/fix/linux/alas2023-2026-2029.md) | Aug 3, 2026 |
| Linux | pipewire-jack-audio-connection-kit-devel ol 10 | 0:1.4.11-1.el10_2 | [ELSA-2026-47083](https://patchblox.com/security/data/fix/linux/elsa-2026-47083.md) | Jul 28, 2026 |
| Linux | pipewire-jack-audio-connection-kit-devel ol 9 | 0:1.4.11-1.el9_8 | [ELSA-2026-47082](https://patchblox.com/security/data/fix/linux/elsa-2026-47082.md) | Aug 12, 2026 |
| Linux | pipewire-jack-audio-connection-kit-libs RHEL 9 | 0:1.4.11-1.el9_8 | [RHSA-2026:47082](https://patchblox.com/security/data/fix/linux/rhsa-2026-47082.md) | Aug 5, 2026 |
| Linux | pipewire-jack-audio-connection-kit-libs almalinux 10 | 1.4.11-1.el10_2 | [ALSA-2026:47083](https://patchblox.com/security/data/fix/linux/alsa-2026-47083.md) | Jul 28, 2026 |
| Linux | pipewire-jack-audio-connection-kit-libs almalinux 9 | 1.4.11-1.el9_8 | [ALSA-2026:47082](https://patchblox.com/security/data/fix/linux/alsa-2026-47082.md) | Jul 28, 2026 |
| Linux | pipewire-jack-audio-connection-kit-libs amzn 2023 | 1.2.7-4.amzn2023.0.5 | [ALAS2023-2026-2029](https://patchblox.com/security/data/fix/linux/alas2023-2026-2029.md) | Aug 3, 2026 |
| Linux | pipewire-jack-audio-connection-kit-libs ol 10 | 0:1.4.11-1.el10_2 | [ELSA-2026-47083](https://patchblox.com/security/data/fix/linux/elsa-2026-47083.md) | Jul 28, 2026 |
| Linux | pipewire-jack-audio-connection-kit-libs ol 9 | 0:1.4.11-1.el9_8 | [ELSA-2026-47082](https://patchblox.com/security/data/fix/linux/elsa-2026-47082.md) | Aug 12, 2026 |
| Linux | pipewire-jack-audio-connection-kit-libs-debuginfo amzn 2023 | 1.2.7-4.amzn2023.0.5 | [ALAS2023-2026-2029](https://patchblox.com/security/data/fix/linux/alas2023-2026-2029.md) | Aug 3, 2026 |
| Linux | pipewire-libs RHEL 9 | 0:1.4.11-1.el9_8 | [RHSA-2026:47082](https://patchblox.com/security/data/fix/linux/rhsa-2026-47082.md) | Aug 5, 2026 |
| Linux | pipewire-libs almalinux 10 | 1.4.11-1.el10_2 | [ALSA-2026:47083](https://patchblox.com/security/data/fix/linux/alsa-2026-47083.md) | Jul 28, 2026 |
| Linux | pipewire-libs almalinux 9 | 1.4.11-1.el9_8 | [ALSA-2026:47082](https://patchblox.com/security/data/fix/linux/alsa-2026-47082.md) | Jul 28, 2026 |
| Linux | pipewire-libs amzn 2023 | 1.2.7-4.amzn2023.0.5 | [ALAS2023-2026-2029](https://patchblox.com/security/data/fix/linux/alas2023-2026-2029.md) | Aug 3, 2026 |
| Linux | pipewire-libs ol 10 | 0:1.4.11-1.el10_2 | [ELSA-2026-47083](https://patchblox.com/security/data/fix/linux/elsa-2026-47083.md) | Jul 28, 2026 |
| Linux | pipewire-libs ol 9 | 0:1.4.11-1.el9_8 | [ELSA-2026-47082](https://patchblox.com/security/data/fix/linux/elsa-2026-47082.md) | Aug 12, 2026 |
| Linux | pipewire-libs-debuginfo amzn 2023 | 1.2.7-4.amzn2023.0.5 | [ALAS2023-2026-2029](https://patchblox.com/security/data/fix/linux/alas2023-2026-2029.md) | Aug 3, 2026 |
| Linux | pipewire-module-x11 RHEL 9 | 0:1.4.11-1.el9_8 | [RHSA-2026:47082](https://patchblox.com/security/data/fix/linux/rhsa-2026-47082.md) | Aug 5, 2026 |
| Linux | pipewire-module-x11 almalinux 10 | 1.4.11-1.el10_2 | [ALSA-2026:47083](https://patchblox.com/security/data/fix/linux/alsa-2026-47083.md) | Jul 28, 2026 |
| Linux | pipewire-module-x11 almalinux 9 | 1.4.11-1.el9_8 | [ALSA-2026:47082](https://patchblox.com/security/data/fix/linux/alsa-2026-47082.md) | Jul 28, 2026 |
| Linux | pipewire-module-x11 amzn 2023 | 1.2.7-4.amzn2023.0.5 | [ALAS2023-2026-2029](https://patchblox.com/security/data/fix/linux/alas2023-2026-2029.md) | Aug 3, 2026 |
| Linux | pipewire-module-x11 ol 10 | 0:1.4.11-1.el10_2 | [ELSA-2026-47083](https://patchblox.com/security/data/fix/linux/elsa-2026-47083.md) | Jul 28, 2026 |
| Linux | pipewire-module-x11-debuginfo amzn 2023 | 1.2.7-4.amzn2023.0.5 | [ALAS2023-2026-2029](https://patchblox.com/security/data/fix/linux/alas2023-2026-2029.md) | Aug 3, 2026 |
| Linux | pipewire-plugin-libcamera almalinux 10 | 1.4.11-1.el10_2 | [ALSA-2026:47083](https://patchblox.com/security/data/fix/linux/alsa-2026-47083.md) | Jul 28, 2026 |
| Linux | pipewire-plugin-libcamera ol 10 | 0:1.4.11-1.el10_2 | [ELSA-2026-47083](https://patchblox.com/security/data/fix/linux/elsa-2026-47083.md) | Jul 28, 2026 |
| Linux | pipewire-plugin-vulkan amzn 2023 | 1.2.7-4.amzn2023.0.5 | [ALAS2023-2026-2029](https://patchblox.com/security/data/fix/linux/alas2023-2026-2029.md) | Aug 3, 2026 |
| Linux | pipewire-plugin-vulkan-debuginfo amzn 2023 | 1.2.7-4.amzn2023.0.5 | [ALAS2023-2026-2029](https://patchblox.com/security/data/fix/linux/alas2023-2026-2029.md) | Aug 3, 2026 |
| Linux | pipewire-pulseaudio RHEL 9 | 0:1.4.11-1.el9_8 | [RHSA-2026:47082](https://patchblox.com/security/data/fix/linux/rhsa-2026-47082.md) | Aug 5, 2026 |
| Linux | pipewire-pulseaudio almalinux 10 | 1.4.11-1.el10_2 | [ALSA-2026:47083](https://patchblox.com/security/data/fix/linux/alsa-2026-47083.md) | Jul 28, 2026 |
| Linux | pipewire-pulseaudio almalinux 9 | 1.4.11-1.el9_8 | [ALSA-2026:47082](https://patchblox.com/security/data/fix/linux/alsa-2026-47082.md) | Jul 28, 2026 |
| Linux | pipewire-pulseaudio amzn 2023 | 1.2.7-4.amzn2023.0.5 | [ALAS2023-2026-2029](https://patchblox.com/security/data/fix/linux/alas2023-2026-2029.md) | Aug 3, 2026 |
| Linux | pipewire-pulseaudio ol 10 | 0:1.4.11-1.el10_2 | [ELSA-2026-47083](https://patchblox.com/security/data/fix/linux/elsa-2026-47083.md) | Jul 28, 2026 |
| Linux | pipewire-pulseaudio ol 9 | 0:1.4.11-1.el9_8 | [ELSA-2026-47082](https://patchblox.com/security/data/fix/linux/elsa-2026-47082.md) | Aug 12, 2026 |
| Linux | pipewire-pulseaudio-debuginfo amzn 2023 | 1.2.7-4.amzn2023.0.5 | [ALAS2023-2026-2029](https://patchblox.com/security/data/fix/linux/alas2023-2026-2029.md) | Aug 3, 2026 |
| Linux | pipewire-utils RHEL 9 | 0:1.4.11-1.el9_8 | [RHSA-2026:47082](https://patchblox.com/security/data/fix/linux/rhsa-2026-47082.md) | Aug 5, 2026 |
| Linux | pipewire-utils almalinux 10 | 1.4.11-1.el10_2 | [ALSA-2026:47083](https://patchblox.com/security/data/fix/linux/alsa-2026-47083.md) | Jul 28, 2026 |
| Linux | pipewire-utils almalinux 9 | 1.4.11-1.el9_8 | [ALSA-2026:47082](https://patchblox.com/security/data/fix/linux/alsa-2026-47082.md) | Jul 28, 2026 |
| Linux | pipewire-utils amzn 2023 | 1.2.7-4.amzn2023.0.5 | [ALAS2023-2026-2029](https://patchblox.com/security/data/fix/linux/alas2023-2026-2029.md) | Aug 3, 2026 |
| Linux | pipewire-utils ol 10 | 0:1.4.11-1.el10_2 | [ELSA-2026-47083](https://patchblox.com/security/data/fix/linux/elsa-2026-47083.md) | Jul 28, 2026 |
| Linux | pipewire-utils ol 9 | 0:1.4.11-1.el9_8 | [ELSA-2026-47082](https://patchblox.com/security/data/fix/linux/elsa-2026-47082.md) | Aug 12, 2026 |
| Linux | pipewire-utils-debuginfo amzn 2023 | 1.2.7-4.amzn2023.0.5 | [ALAS2023-2026-2029](https://patchblox.com/security/data/fix/linux/alas2023-2026-2029.md) | Aug 3, 2026 |
| Linux | pipewire-v4l2 amzn 2023 | 1.2.7-4.amzn2023.0.5 | [ALAS2023-2026-2029](https://patchblox.com/security/data/fix/linux/alas2023-2026-2029.md) | Aug 3, 2026 |
| Linux | pipewire-v4l2-debuginfo amzn 2023 | 1.2.7-4.amzn2023.0.5 | [ALAS2023-2026-2029](https://patchblox.com/security/data/fix/linux/alas2023-2026-2029.md) | Aug 3, 2026 |

---

Data as of 2026-11-08T06:59:42Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.