Red Hat Security Advisory

RHSA-2026:95063

flatpak security update

Released 2026-11-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.9.2) flatpak-1.12.7-5.el9_2.7, flatpak-libs-1.12.7-5.el9_2.7, flatpak-selinux-1.12.7-5.el9_2.7 +1

Fixes 2 records

TI-2026-63925 CVE-2026-97024

Flatpak: flatpak: arbitrary write in root context via path traversal in deploy directory files/etc

LOW 32

A path traversal vulnerability in Flatpak's handling of the files/etc directory during app deployment allows a malicious Flatpak app to cause certain host system files (such as passwd, group, machine-id, or resolv.conf)…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0047 Published 2026-09-29 Partial fix · 1.16.0-9.el10_2.6, 1.16.0-5.el10_0.8 +5 CWE-61

TI-2026-63924 CVE-2026-97023

Flatpak: flatpak: arbitrary file deletion in root context via path traversal in deploy directory export/bin

LOW 32

A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause deletion of attacker-chosen files outside the deployment directory when the a…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00461 Published 2026-09-28 Partial fix · 1.16.0-9.el10_2.6, 1.16.0-5.el10_0.8 +5 CWE-61