EIP-2026-103772

This exploit leverages a misconfigured D-Bus interface in Deepin Linux 15.5's lastore-daemon, allowing any user in the sudo group to install arbitrary packages without authentication. It crafts a malicious .deb package with a post-install script that creates a setuid root shell, then uses dbus-send to trigger installation via the vulnerable D-Bus method.