flatpak vulnerabilities

Products

• flatpak 19
• xdg-desktop-portal 3
• flatpak-builder 2
• xdg-dbus-proxy 1

Latest flatpak CVEs

Newest publication first

1. CVE-2026-55888 XDG Desktop Portal: Arbitrary file access via SaveFiles "files" option path traversal

   Published 2026-10-23

   High·CVSS 8.8

   XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileChooser.SaveFiles method to gain arbitrary file access to non-existing files on the host (limited to files the user has access to). The FileChooser.SaveFi...

2. CVE-2026-55889 XDG Desktop Portal: Drag-and-drop and copy-paste theft via predictable FileTransfer key

   Published 2026-10-23

   High·CVSS 8.3

   XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileTransfer.RetrieveFiles method to redirect drag-and-drop and copy-paste data targeted at other applications to itself. Some portals generate tokens which p...

3. CVE-2026-92162 Flatpak vulnerable to path traversal via unvalidated "arch" parameter in DeployAppstream

   Published 2026-10-20

   High·CVSS 7.2

   Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Prior to version 1.18.1, on systems where at least one OCI remote is configured (most common on Fedora systems), a malicious local user in an active local session could use a craf...

4. CVE-2026-96808 flatpak: Flatpak: Local privilege escalation via symlink traversal in revokefs writer

   Published 2026-09-23

   High·CVSS 7.4

   In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data from unprivileged callers, validated file paths by rejecting literal .. components but did not prevent symlink traversal. A malicious local user in an active local session...

5. CVE-2026-96807 flatpak: Flatpak: Low integrity or availability impact via symlink manipulation

   Published 2026-09-23

   Medium·CVSS 4.0

   In Flatpak before 1.18.1, a malicious sandboxed app can replace ~/.var/app/$appid/.ld.so with a symlink, causing regenerate_ld_cache to write files at an arbitrary location. The filenames and content are not attacker controlled, making this hard to exploit.

6. CVE-2026-90616 flatpak: Flatpak: Arbitrary code execution via missing symlink protection

   Published 2026-09-12

   High·CVSS 7.4

   In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to files on the host, which can be escalated to arbitrary code execution on the host, a different vulnerability than CVE-2026-76925. Flatpak creates a few app data directories (e.g., /v...

7. CVE-2026-40354 flatpak: xdg-desktop-portal: Flatpak xdg-desktop-portal: File deletion via symlink attack

   Published 2026-04-11

   Low·CVSS 2.9

   Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app to trash any file in the host context via a symlink attack on g_file_trash.

8. CVE-2026-39977 flatpak-builder has a path traversal leading to arbitrary file read on host when installing licence files

   Published 2026-04-09

   High·CVSS 7.1

   flatpak-builder is a tool to build flatpaks from source. From 1.4.5 to before 1.4.8, the license-files manifest key takes an array of paths to user defined licence files relative to the source directory of the module. The paths from that array are resolved using g_file_resolve_re...

9. CVE-2026-34079 Flatpak affected by arbitrary file deletion on the host filesystem

   Published 2026-04-07

   High·CVSS 8.7

   Flatpak is a Linux application sandboxing and distribution framework. Prior to 1.16.4, the caching for ld.so removes outdated cache files without properly checking that the app controlled path to the outdated cache is in the cache directory. This allows Flatpak apps to delete arb...

10. CVE-2026-34078 Flatpak has a complete sandbox escape leading to host file access and code execution in the host context

    Published 2026-04-07

    Critical·CVSS 9.3

    Flatpak is a Linux application sandboxing and distribution framework. Prior to 1.16.4, the Flatpak portal accepts paths in the sandbox-expose options which can be app-controlled symlinks pointing at arbitrary paths. Flatpak run mounts the resolved host path in the sandbox. This g...

11. CVE-2026-34080 xdg-dbus-proxy has an eavesdrop filter bypass allowing message interception

    Published 2026-04-07

    Medium·CVSS 6.8

    xdg-dbus-proxy is a filtering proxy for D-Bus connections. Prior to 0.1.7, a policy parser vulnerability allows bypassing eavesdrop restrictions. The proxy checks for eavesdrop=true in policy rules but fails to handle eavesdrop ='true' (with a space before the equals sign) and si...

12. CVE-2024-42472 Flatpak may allow access to files outside sandbox for certain apps

    Published 2024-08-15

    Critical·CVSS 10.0

    Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.14.0 and 1.15.10, a malicious or compromised Flatpak app using persistent directories could access and write files outside of what it would otherwise have access to, which is an attack on in...

13. CVE-2024-32462 Flatpak vulnerable to a sandbox escape via RequestBackground portal due to bad argument parsing

    Published 2024-04-18

    High·CVSS 8.4

    Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. in versions before 1.10.9, 1.12.9, 1.14.6, and 1.15.8, a malicious or compromised Flatpak app could execute arbitrary code outside its sandbox. Normally, the --command argument of...

14. CVE-2023-28101 Flatpak metadata with ANSI control codes can cause misleading terminal output

    Published 2023-03-16

    Medium·CVSS 4.3

    Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4, if an attacker publishes a Flatpak app with elevated permissions, they can hide those permissions from users of the flatpa...

15. CVE-2023-28100 TIOCLINUX can send commands outside sandbox if running on a virtual console

    Published 2023-03-16

    Medium·CVSS 6.5

    Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4 contain a vulnerability similar to CVE-2017-5226, but using the TIOCLINUX ioctl command instead of TIOCSTI. If a Flatpak app i...

16. CVE-2022-21682 flatpak-builder can access files outside the build directory.

    Published 2022-01-13

    Medium·CVSS 6.5

    Flatpak is a Linux application sandboxing and distribution framework. A path traversal vulnerability affects versions of Flatpak prior to 1.12.3 and 1.10.6. flatpak-builder applies finish-args last in the build. At this point the build directory will have the full access that is...

17. CVE-2021-43860 Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.12.3 and 1.10.6, Flatpak doesn't properly validate that the permissions displayed to the user for an app at in...

    Published 2022-01-12

    High·CVSS 8.6

    Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.12.3 and 1.10.6, Flatpak doesn't properly validate that the permissions displayed to the user for an app at install time match the actual permissions granted to the app at runtime, in the ca...

18. CVE-2021-41133 Sandbox bypass via recent VFS-manipulating syscalls

    Published 2021-10-08

    High·CVSS 7.8

    Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.4 and 1.12.0, Flatpak apps with direct access to AF_UNIX sockets such as those used by Wayland, Pipewire or pipewire-pulse can trick portals and other ho...

19. CVE-2021-21381 Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In Flatpack since version 0.9.4 and before version 1.10.2 has a vulnerability in the "file forwardi...

    Published 2021-03-11

    High·CVSS 8.2

    Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In Flatpack since version 0.9.4 and before version 1.10.2 has a vulnerability in the "file forwarding" feature which can be used by an attacker to gain access to files that would...

20. CVE-2021-21261 Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. A bug was discovered in the flatpak-portal service that can allow sandboxed applications to execute...

    Published 2021-01-14

    High·CVSS 8.8

    Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. A bug was discovered in the flatpak-portal service that can allow sandboxed applications to execute arbitrary code on the host system (a sandbox escape). This sandbox-escape bug i...

21. CVE-2019-10063 Flatpak before 1.0.8, 1.1.x and 1.2.x before 1.2.4, and 1.3.x before 1.3.1 allows a sandbox bypass. Flatpak versions since 0.8.1 address CVE-2017-5226 by using a seccomp filter to prevent sandboxed ap...

    Published 2019-03-26

    Critical·CVSS 9.0

    Flatpak before 1.0.8, 1.1.x and 1.2.x before 1.2.4, and 1.3.x before 1.3.1 allows a sandbox bypass. Flatpak versions since 0.8.1 address CVE-2017-5226 by using a seccomp filter to prevent sandboxed apps from using the TIOCSTI ioctl, which could otherwise be used to inject command...

22. CVE-2019-8308 Flatpak before 1.0.7, and 1.1.x and 1.2.x before 1.2.3, exposes /proc in the apply_extra script sandbox, which allows attackers to modify a host-side executable file.

    Published 2019-02-12

    High·CVSS 8.2

    Flatpak before 1.0.7, and 1.1.x and 1.2.x before 1.2.3, exposes /proc in the apply_extra script sandbox, which allows attackers to modify a host-side executable file.

23. CVE-2018-6560 In dbus-proxy/flatpak-proxy.c in Flatpak before 0.8.9, and 0.9.x and 0.10.x before 0.10.3, crafted D-Bus messages to the host can be used to break out of the sandbox, because whitespace handling in th...

    Published 2018-02-02

    High·CVSS 8.8

    In dbus-proxy/flatpak-proxy.c in Flatpak before 0.8.9, and 0.9.x and 0.10.x before 0.10.3, crafted D-Bus messages to the host can be used to break out of the sandbox, because whitespace handling in the proxy is not identical to whitespace handling in the daemon.

24. CVE-2017-9780 In Flatpak before 0.8.7, a third-party app repository could include malicious apps that contain files with inappropriate permissions, for example setuid or world-writable. The files are deployed with....

    Published 2017-06-21

    High·CVSS 7.8

    In Flatpak before 0.8.7, a third-party app repository could include malicious apps that contain files with inappropriate permissions, for example setuid or world-writable. The files are deployed with those permissions, which would let a local attacker run the setuid executable or...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.