flatpak

Records24All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high16CVSS 7.0–8.9

Exploited now

flatpak records in CISA KEV

No flatpak vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Flatpak 15 records MEDIUM Flatpak-builder 2 records MEDIUM Xdg-dbus-proxy 1 record LOW Xdg-desktop-portal 1 record LOW

Records

1 record in Xdg-desktop-portal · all components

TI-2026-29129 CVE-2026-40354 · GHSA-v5fw-rcv7-v6f3

Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app…

LOW 27

Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app to trash any file in the host context via a symlink attack on g_file_trash.

CVSS 3.1MEDIUM 6.3 Local Low privileges No interaction EPSS 0.00133 Published 2026-04-11 Partial fix · 1.20.4, 1.21.1 CWE-61

Open these records in search →

Critical	4
High	16
Medium	4
Low	0
No CVSS	0