Red Hat Security Advisory

RHSA-2026:80973

flatpak-builder security update

Released 2026-10-12 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2026-59102 CVE-2026-86320 · GHSA-rvpr-5p35-6vf8

HIGH 69

A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00299 Published 2026-09-17 Fixed in 1.4.4-1.el10_2.1, 1.4.4-1.el10_0.1 +8 CWE-94