CVE-2026-96282
Fixed in a distro release EPSS <1%CVSS 3.1
A malicious Flatpak extension can probe the host filesystem to determine what files and directories exist at arbitrary paths, and host directory listings can be disclosed to sandboxed applications using the extension. Additionally, unvalidated extension metadata can cause extension content to be mounted at unintended locations inside the sandbox.
Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | flatpak | no fix |
| Debian 13 | flatpak | 1.16.6-1~deb13u2 |
| Debian 14 | flatpak | 1.18.1-1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | flatpak | 1.4.2-3.15.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | flatpak | 1.4.2-3.15.1 |
| Ubuntu 26.04 LTS | flatpak | no fix |
| Ubuntu Pro 18.04 LTS | flatpak | no fix |
| Ubuntu Pro 20.04 LTS | flatpak | no fix |
| Ubuntu Pro 22.04 LTS | flatpak | no fix |
| Ubuntu Pro 24.04 LTS | flatpak | no fix |