[ Vendor · 4 CVEs ]
Flatpak
CVEs affecting Flatpak published in the last 30 days, plus any Flatpak CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-92162 | 20 Oct 2026 | CVSS 7.2 | flatpakFlatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Prior to version 1.18.1, on systems where at… | |
| CVE-2026-96807 | 23 Sep 2026 | CVSS 4.0 | FlatpakIn Flatpak before 1.18.1, a malicious sandboxed app can replace ~/.var/app/$appid/.ld.so with a symlink, causing regenerate_ld_cache to write files… | |
| CVE-2026-96808 | 23 Sep 2026 | CVSS 7.4 | FlatpakIn Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data from unprivileged callers, validated file… | |
| CVE-2026-90616 | 12 Sep 2026 | CVSS 7.4 | FlatpakIn Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to files on the host, which can be escalated to… |