4.0
Medium
CVE-2026-96807 In Flatpak before 1.18.1, a malicious sandboxed app can replace ~/.var/app/$appid/.ld.so with a symlink, causing…
Description
In Flatpak before 1.18.1, a malicious sandboxed app can replace ~/.var/app/$appid/.ld.so with a symlink, causing regenerate_ld_cache to write files at an arbitrary location. The filenames and content are not attacker controlled, making this hard to exploit.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| flatpak 1.18 | earliest → < 1.18.1 | 1.18.1 |
References
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of flatpak
The 15 CVEs of flatpak →
CVE-2026-92162
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux
7.2
High
CVE-2026-96808
In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data from…
7.4
High
CVE-2026-90616
In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to files on the host,…
7.4
High
CVE-2026-34079
Flatpak is a Linux application sandboxing and distribution framework
8.7
High