Priority MEDIUM 44
Flatpak is a Linux application sandboxing and distribution framework.
Vulnerabilities
15 records
TI-2026-26401 CVE-2026-34078
Flatpak has a complete sandbox escape leading to host file access and code execution in the host context
Priority MEDIUM 51
Flatpak is a Linux application sandboxing and distribution framework.
Priority MEDIUM 51
Flatpak is a Linux application sandboxing and distribution framework.
TI-2024-21357 CVE-2024-32462
Flatpak vulnerable to a sandbox escape via RequestBackground portal due to bad argument parsing
Priority LOW 39
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.
TI-2023-12680 CVE-2023-28101
Flatpak metadata with ANSI control codes can cause misleading terminal output
Priority LOW 25
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.
TI-2023-12679 CVE-2023-28100
TIOCLINUX can send commands outside sandbox if running on a virtual console
Priority MEDIUM 50
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.
Priority LOW 37
Flatpak is a Linux application sandboxing and distribution framework.
TI-2021-19666 CVE-2021-43860
Permissions granted to applications can be hidden from the user at install time
Priority MEDIUM 40
Flatpak is a Linux application sandboxing and distribution framework.
Priority MEDIUM 40
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.
Priority LOW 39
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.
TI-2021-04363 CVE-2021-21261
Flatpak sandbox escape via spawn portal
Priority LOW 39
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.
TI-2019-07389 CVE-2019-10063 · GHSA-mc9j-733x-89cx
Flatpak before 1.0.8, 1.1.x and 1.2.x before 1.2.4, and 1.3.x before 1.3.1 allows a…
Priority MEDIUM 43
Flatpak before 1.0.8, 1.1.x and 1.2.x before 1.2.4, and 1.3.x before 1.3.1 allows a sandbox bypass.
TI-2019-05964 CVE-2019-8308 · GHSA-26wh-22xw-qfqx
Flatpak before 1.0.7, and 1.1.x and 1.2.x before 1.2.3, exposes /proc in the apply_extra…
Priority LOW 36
Flatpak before 1.0.7, and 1.1.x and 1.2.x before 1.2.3, exposes /proc in the apply_extra script sandbox, which allows attackers to modify a host-side executable file.
TI-2018-04836 CVE-2018-6560 · GHSA-5xcx-r88v-8v7g
In dbus-proxy/flatpak-proxy.c in Flatpak before 0.8.9, and 0.9.x and 0.10.x before…
Priority LOW 38
In dbus-proxy/flatpak-proxy.c in Flatpak before 0.8.9, and 0.9.x and 0.10.x before 0.10.3, crafted D-Bus messages to the host can be used to break out of the sandbox, because whitespace handling in the proxy is not ident…
TI-2017-07161 CVE-2017-9780 · GHSA-jchq-9f4q-gvc5
In Flatpak before 0.8.7, a third-party app repository could include malicious apps that…
Priority LOW 34
In Flatpak before 0.8.7, a third-party app repository could include malicious apps that contain files with inappropriate permissions, for example setuid or world-writable.