flatpak vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 20224
3. 20232
4. 20242
5. 202611

Newest CVEs

• CVE-2026-55888

  XDG Desktop Portal: Arbitrary file access via SaveFiles "files" option path traversal

  flatpak · xdg-desktop-portal

  High8.8
• CVE-2026-55889

  XDG Desktop Portal: Drag-and-drop and copy-paste theft via predictable FileTransfer key

  flatpak · xdg-desktop-portal

  High8.3
• CVE-2026-92162

  Flatpak vulnerable to path traversal via unvalidated "arch" parameter in DeployAppstream

  flatpak · flatpak

  High7.2
• CVE-2026-96808

  In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data from unprivileged callers, validated file paths by…

  Flatpak · Flatpak

  High7.4
• CVE-2026-96807

  In Flatpak before 1.18.1, a malicious sandboxed app can replace ~/.var/app/$appid/.ld.so with a symlink, causing regenerate_ld_cache to write files at an…

  Flatpak · Flatpak

  Medium4.0
• CVE-2026-90616

  In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to files on the host, which can be escalated to arbitrary code…

  Flatpak · Flatpak

  High7.4
• CVE-2026-40354

  Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app to trash any file in the host context via a symlink attack on…

  Flatpak · xdg-desktop-portal

  Low2.9
• CVE-2026-39977

  flatpak-builder has a path traversal leading to arbitrary file read on host when installing licence files

  flatpak · flatpak-builder

  High7.1
• CVE-2026-34079

  Flatpak affected by arbitrary file deletion on the host filesystem

  flatpak · flatpak

  High8.7
• CVE-2026-34078

  Flatpak has a complete sandbox escape leading to host file access and code execution in the host context

  flatpak · flatpak

  Critical9.3