Описание
A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause deletion of attacker-chosen files outside the deployment directory when the app is installed or upgraded. In system-wide installations, the deletion is performed as root.
Отчет
Red Hat estimates the CVSSv3.1 vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H from provided CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N. The attack requires user interaction and does not cross a security boundary, meaning the scope is unchanged.
Меры по смягчению последствий
Avoid installing Flatpak apps from non-trusted publishers, particularly in system-wide deployments.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 7 | flatpak | Affected | ||
| Red Hat Enterprise Linux 10 | flatpak | Fixed | RHSA-2026:89849 | 26.10.2026 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | flatpak | Fixed | RHSA-2026:95062 | 04.11.2026 |
| Red Hat Enterprise Linux 8 | flatpak | Fixed | RHSA-2026:89859 | 26.10.2026 |
| Red Hat Enterprise Linux 9 | flatpak | Fixed | RHSA-2026:89850 | 26.10.2026 |
| Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | flatpak | Fixed | RHSA-2026:95063 | 04.11.2026 |
| Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | flatpak | Fixed | RHSA-2026:95064 | 04.11.2026 |
| Red Hat Enterprise Linux 9.6 Extended Update Support | flatpak | Fixed | RHSA-2026:95061 | 04.11.2026 |
Показывать по
Дополнительная информация
Статус:
EPSS
7.1 High
CVSS3
Связанные уязвимости
A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause deletion of attacker-chosen files outside the deployment directory when the app is installed or upgraded. In system-wide installations, the deletion is performed as root.
A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause deletion of attacker-chosen files outside the deployment directory when the app is installed or upgraded. In system-wide installations, the deletion is performed as root.
A path traversal vulnerability in Flatpak's handling of the export/bin ...
EPSS
7.1 High
CVSS3