Описание
A path traversal vulnerability in Flatpak's handling of the files/etc directory during app deployment allows a malicious Flatpak app to cause certain host system files (such as passwd, group, machine-id, or resolv.conf) to be emptied or replaced with a symlink when the app is installed or upgraded. In system-wide installations, the write is performed as root.
Отчет
Red Hat estimates the CVSSv3.1 vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H from provided CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N. The attack requires user interaction and does not cross a security boundary, meaning the scope is unchanged.
Меры по смягчению последствий
Avoid installing Flatpak apps from untrusted publishers, especially system-wide.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 7 | flatpak | Affected | ||
| Red Hat Enterprise Linux 10 | flatpak | Fixed | RHSA-2026:89849 | 26.10.2026 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | flatpak | Fixed | RHSA-2026:95062 | 04.11.2026 |
| Red Hat Enterprise Linux 8 | flatpak | Fixed | RHSA-2026:89859 | 26.10.2026 |
| Red Hat Enterprise Linux 9 | flatpak | Fixed | RHSA-2026:89850 | 26.10.2026 |
| Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | flatpak | Fixed | RHSA-2026:95063 | 04.11.2026 |
| Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | flatpak | Fixed | RHSA-2026:95064 | 04.11.2026 |
| Red Hat Enterprise Linux 9.6 Extended Update Support | flatpak | Fixed | RHSA-2026:95061 | 04.11.2026 |
Показывать по
Дополнительная информация
Статус:
EPSS
7.1 High
CVSS3
Связанные уязвимости
A path traversal vulnerability in Flatpak's handling of the files/etc directory during app deployment allows a malicious Flatpak app to cause certain host system files (such as passwd, group, machine-id, or resolv.conf) to be emptied or replaced with a symlink when the app is installed or upgraded. In system-wide installations, the write is performed as root.
A path traversal vulnerability in Flatpak's handling of the files/etc directory during app deployment allows a malicious Flatpak app to cause certain host system files (such as passwd, group, machine-id, or resolv.conf) to be emptied or replaced with a symlink when the app is installed or upgraded. In system-wide installations, the write is performed as root.
A path traversal vulnerability in Flatpak's handling of the files/etc ...
EPSS
7.1 High
CVSS3