xdg-desktop-portal vulnerabilities

2 known vulnerabilities in xdg-desktop-portal from Flatpak. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.3 High severity

  xdg-desktop-portal: Use of Insufficiently Random Values

  CVE-2026-55889Oct 23, 2026Flatpak

  XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileTransfer.RetrieveFiles method to redirect drag-and-drop and copy-paste data targeted at other applications to itself. Some portals gen

• 8.8 High severity

  xdg-desktop-portal: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-55888Oct 23, 2026Flatpak

  XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileChooser.SaveFiles method to gain arbitrary file access to non-existing files on the host (limited to files the user has access to). Th