TI-2026-28833 CVE-2026-39977
flatpak-builder has a path traversal leading to arbitrary file read on host when installing licence files
Priority MEDIUM 64
flatpak-builder is a tool to build flatpaks from source.
flatpak
Records24All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high16CVSS 7.0–8.9
Exploited now
flatpak records in CISA KEVNo flatpak vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
24 records
TI-2026-26401 CVE-2026-34078
Flatpak has a complete sandbox escape leading to host file access and code execution in the host context
Priority MEDIUM 51
Flatpak is a Linux application sandboxing and distribution framework.
Priority MEDIUM 51
Flatpak is a Linux application sandboxing and distribution framework.
TI-2023-12679 CVE-2023-28100
TIOCLINUX can send commands outside sandbox if running on a virtual console
Priority MEDIUM 50
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.
Priority MEDIUM 44
XDG Desktop Portal is a desktop integration portal.
Priority MEDIUM 44
Flatpak is a Linux application sandboxing and distribution framework.
TI-2019-07389 CVE-2019-10063 · GHSA-mc9j-733x-89cx
Flatpak before 1.0.8, 1.1.x and 1.2.x before 1.2.4, and 1.3.x before 1.3.1 allows a…
Priority MEDIUM 43
Flatpak before 1.0.8, 1.1.x and 1.2.x before 1.2.4, and 1.3.x before 1.3.1 allows a sandbox bypass.
TI-2021-19666 CVE-2021-43860
Permissions granted to applications can be hidden from the user at install time
Priority MEDIUM 40
Flatpak is a Linux application sandboxing and distribution framework.
Priority MEDIUM 40
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.
TI-2024-21357 CVE-2024-32462
Flatpak vulnerable to a sandbox escape via RequestBackground portal due to bad argument parsing
Priority LOW 39
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.
Priority LOW 39
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.
TI-2021-04363 CVE-2021-21261
Flatpak sandbox escape via spawn portal
Priority LOW 39
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.
TI-2018-04836 CVE-2018-6560 · GHSA-5xcx-r88v-8v7g
In dbus-proxy/flatpak-proxy.c in Flatpak before 0.8.9, and 0.9.x and 0.10.x before…
Priority LOW 38
In dbus-proxy/flatpak-proxy.c in Flatpak before 0.8.9, and 0.9.x and 0.10.x before 0.10.3, crafted D-Bus messages to the host can be used to break out of the sandbox, because whitespace handling in the proxy is not ident…
Priority LOW 37
Flatpak is a Linux application sandboxing and distribution framework.
Priority LOW 36
XDG Desktop Portal is a desktop integration portal.
TI-2019-05964 CVE-2019-8308 · GHSA-26wh-22xw-qfqx
Flatpak before 1.0.7, and 1.1.x and 1.2.x before 1.2.3, exposes /proc in the apply_extra…
Priority LOW 36
Flatpak before 1.0.7, and 1.1.x and 1.2.x before 1.2.3, exposes /proc in the apply_extra script sandbox, which allows attackers to modify a host-side executable file.
TI-2026-61622 CVE-2026-90616 · GHSA-vhx5-8pfj-7wrv
In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write…
Priority LOW 34
In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to files on the host, which can be escalated to arbitrary code execution on the host, a different vulnerability than CVE-2026…
TI-2017-07161 CVE-2017-9780 · GHSA-jchq-9f4q-gvc5
In Flatpak before 0.8.7, a third-party app repository could include malicious apps that…
Priority LOW 34
In Flatpak before 0.8.7, a third-party app repository could include malicious apps that contain files with inappropriate permissions, for example setuid or world-writable.
Priority LOW 33
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.
TI-2026-63872 CVE-2026-96808
In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to…
Priority LOW 33
In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data from unprivileged callers, validated file paths by rejecting literal ..
TI-2026-26403 CVE-2026-34080
xdg-dbus-proxy has an eavesdrop filter bypass allowing message interception
Priority LOW 29
xdg-dbus-proxy is a filtering proxy for D-Bus connections.
TI-2026-29129 CVE-2026-40354 · GHSA-v5fw-rcv7-v6f3
Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app…
Priority LOW 27
Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app to trash any file in the host context via a symlink attack on g_file_trash.
TI-2023-12680 CVE-2023-28101
Flatpak metadata with ANSI control codes can cause misleading terminal output
Priority LOW 25
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.
TI-2026-63871 CVE-2026-96807
In Flatpak before 1.18.1, a malicious sandboxed app can replace ~/.var/app/$appid/.ld.so…
Priority LOW 18
In Flatpak before 1.18.1, a malicious sandboxed app can replace ~/.var/app/$appid/.ld.so with a symlink, causing regenerate_ld_cache to write files at an arbitrary location.