Flatpak vulnerabilities
We track 9 vulnerabilities in Flatpak products across 2 products. 9 are rated high or critical, and none are known to be exploited. The most recent was published on October 23, 2026.
Latest Flatpak vulnerabilities
- 8.3 High severity
xdg-desktop-portal: Use of Insufficiently Random Values
XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileTransfer.RetrieveFiles method to redirect drag-and-drop and copy-paste data targeted at other applications to itself. Some portals gen
- 8.8 High severity
xdg-desktop-portal: Improper Limitation of a Pathname to a Restricted Directory
XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileChooser.SaveFiles method to gain arbitrary file access to non-existing files on the host (limited to files the user has access to). Th
- 7.2 High severity
flatpak: Improper Limitation of a Pathname to a Restricted Directory
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Prior to version 1.18.1, on systems where at least one OCI remote is configured (most common on Fedora systems), a malicious local user in an active local sess
- 7.4 High severity
Flatpak: UNIX Symbolic Link (Symlink) Following
In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data from unprivileged callers, validated file paths by rejecting literal .. components but did not prevent symlink traversal. A malicious local user in an a
- 7.4 High severity
Flatpak: UNIX Symbolic Link (Symlink) Following
In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to files on the host, which can be escalated to arbitrary code execution on the host, a different vulnerability than CVE-2026-76925. Flatpak creates a few app data d
- 7.5 High severity
flatpak: Improper Limitation of a Pathname to a Restricted Directory
Flatpak is a Linux application sandboxing and distribution framework. Prior to 1.16.4, the caching for ld.so removes outdated cache files without properly checking that the app controlled path to the outdated cache is in the cache directory. This allows Flatpa
- 10.0 Critical severity
flatpak: UNIX Symbolic Link (Symlink) Following
Flatpak is a Linux application sandboxing and distribution framework. Prior to 1.16.4, the Flatpak portal accepts paths in the sandbox-expose options which can be app-controlled symlinks pointing at arbitrary paths. Flatpak run mounts the resolved host path in
- 10.0 Critical severity
flatpak: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.14.0 and 1.15.10, a malicious or compromised Flatpak app using persistent directories could access and write files outside of what it would otherwise have access to, whic
- 8.4 High severity
flatpak: Improper Neutralization of Argument Delimiters in a Command
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. in versions before 1.10.9, 1.12.9, 1.14.6, and 1.15.8, a malicious or compromised Flatpak app could execute arbitrary code outside its sandbox. Normally, the `