A flaw was found in dnf5daemon-server. Multiple unauthenticated D-Bus methods (Rpm.list, Rpm.list_fd, and Rpm.install/upgrade/downgrade/reinstall followed by Goal.resolve) pass caller-controlled patterns into libdnf5 add_cmdline_packages(). URL patterns (file://, http(s)://, ftp://) are downloaded as root into the world-readable /var/cache/dnf5daemon-server directory before RPM validation and without a download size quota. Non-URL patterns ending in .rpm are opened directly as root from attacker-controlled paths (for example symlinks or FIFOs under an attacker-owned directory). A local unprivileged user can disclose arbitrary content the root daemon can open, obtain capability-gated /proc data such as real /proc/kallsyms addresses, fetch remote URLs as root into a world-readable cache, and exhaust disk space via unbounded downloads.