Bug 521526 - Sandbox thumbnailers
Summary: Sandbox thumbnailers
Status: CONFIRMED
Alias: None
Product: kio-extras
Classification: Frameworks and Libraries
Component: Thumbnails and previews (other bugs)
Version First Reported In: 26.04.2
Platform: Flatpak Linux
: NOR wishlist
Target Milestone: ---
Assignee: Plasma Bugs List
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2026-06-16 14:12 UTC by Unknown
Modified: 2026-06-16 17:17 UTC (History)
2 users (show)

See Also:
Latest Commit:
Version Fixed/Implemented In:
Sentry Crash Report:

Attachments
Add an attachment

Note You need to log in before you can comment on or make changes to this bug.
Description Unknown 2026-06-16 14:12:49 UTC 
DESCRIPTION
This prevents attacks and improves security (1).  Gnome Files and Thunar/Tumbler already have weak protection against this (2,3). Additionally COSMIC is planning on adding it in epoch 2 (4). 

[1] https://scarybeastsecurity.blogspot.com/2016/11/0day-exploit-compromising-linux-desktop.html
[2] https://gitlab.gnome.org/GNOME/gnome-desktop/-/issues/213
[3] https://gitlab.gnome.org/GNOME/glycin/-/blob/main/glycin/src/sandbox.rs#L32
[4] https://github.com/pop-os/cosmic-files/issues/1189#event-20127287968

STEPS TO REPRODUCE
1. Check the source code
2.  See no sandboxing of thumbnailers.

OBSERVED RESULT
Thumbnailers are not sandboxed.

EXPECTED RESULT
Thumbnailers should be sandboxed using for example bubblewrap.
Comment 1 TraceyC 2026-06-16 17:17:07 UTC 
Moving to kio-extras, which handles thumbnails

Also, changing this to wishlist, since it's a feature request (changing the existing behavior) rather than a bug.