Inside polkit is pkexec, a vulnerable SUID-root program that is installed by default on every major Linux distribution. Qualys dubs it the Pwnkit vulnerability.