Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-97023

Опубликовано: 28 сент. 2026
Источник: nvd
CVSS3: 7.1
EPSS Низкий

Описание

A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause deletion of attacker-chosen files outside the deployment directory when the app is installed or upgraded. In system-wide installations, the deletion is performed as root.

EPSS

Процентиль: 40%
0.00461
Низкий

7.1 High

CVSS3

Дефекты

CWE-61

Связанные уязвимости

CVSS3: 7.1
ubuntu
около 1 месяца назад

A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause deletion of attacker-chosen files outside the deployment directory when the app is installed or upgraded. In system-wide installations, the deletion is performed as root.

CVSS3: 7.1
redhat
около 1 месяца назад

A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause deletion of attacker-chosen files outside the deployment directory when the app is installed or upgraded. In system-wide installations, the deletion is performed as root.

CVSS3: 7.1
debian
около 1 месяца назад

A path traversal vulnerability in Flatpak's handling of the export/bin ...

rocky
14 дней назад

Important: flatpak security update

rocky
14 дней назад

Important: flatpak security update

EPSS

Процентиль: 40%
0.00461
Низкий

7.1 High

CVSS3

Дефекты

CWE-61