2.9
Faible
CVE-2026-40354 Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app to trash any file in the host…
Description
Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app to trash any file in the host context via a symlink attack on g_file_trash.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| xdg-desktop-portal 1.21 | 1.21.0 → < 1.21.1 | 1.21.1 |
| xdg-desktop-portal 1.20 | premières → < 1.20.4 | 1.20.4 |