Every CVESearch/Get API key

CVE-2026-97023

Flatpak: flatpak: arbitrary file deletion in root context via path traversal in deploy directory export/bin

7.1 HighFix available

CVE-2026-97023 is a high vulnerability (CVSS 7.1) in Red Hat Enterprise Linux 10, published September 28, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.46%, the 40th percentile. Fixed in flatpak 1.0.9-13.0.1.el7_9.tuxcare.els2.

What does this mean?
Severity
7.1 HighCVSS 3.1, CVE List
Exploit chance
0.46%EPSS, 40th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
1.0.9-13.0.1.el7_9.tuxcare.els2flatpak +168 more

Description

A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause deletion of attacker-chosen files outside the deployment directory when the app is installed or upgraded. In system-wide installations, the deletion is performed as root.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
Low
Availability
High

Exploit likelihood

0.46%Up 0.2 points since Sep 29, 2026
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
flatpak
AlmaLinux:10
From an advisory covering 2 CVEs
before 1.16.0-9.el10_2.6
1.16.0-9.el10_2.6
flatpak-devel
AlmaLinux:10
From an advisory covering 2 CVEs
before 1.16.0-9.el10_2.6
1.16.0-9.el10_2.6
flatpak-libs
AlmaLinux:10
From an advisory covering 2 CVEs
before 1.16.0-9.el10_2.6
1.16.0-9.el10_2.6
flatpak-selinux
AlmaLinux:10
From an advisory covering 2 CVEs
before 1.16.0-9.el10_2.6
1.16.0-9.el10_2.6
flatpak-session-helper
AlmaLinux:10
From an advisory covering 2 CVEs
before 1.16.0-9.el10_2.6
1.16.0-9.el10_2.6
flatpak
AlmaLinux:9
From an advisory covering 2 CVEs
before 1.12.9-4.el9_8.6
1.12.9-4.el9_8.6
flatpak-devel
AlmaLinux:9
From an advisory covering 2 CVEs
before 1.12.9-4.el9_8.6
1.12.9-4.el9_8.6
flatpak-session-helper
AlmaLinux:9
From an advisory covering 2 CVEs
before 1.12.9-4.el9_8.6
1.12.9-4.el9_8.6
flatpak
AlmaLinux:8
From an advisory covering 2 CVEs
before 1.12.9-9.el8_10
1.12.9-9.el8_10
flatpak-devel
AlmaLinux:8
From an advisory covering 2 CVEs
before 1.12.9-9.el8_10
1.12.9-9.el8_10
Show 159 moreShow less
Affected packages
PackageAffectedFixed
flatpak-libs
AlmaLinux:8
From an advisory covering 2 CVEs
before 1.12.9-9.el8_10
1.12.9-9.el8_10
flatpak-selinux
AlmaLinux:8
From an advisory covering 2 CVEs
before 1.12.9-9.el8_10
1.12.9-9.el8_10
flatpak-session-helper
AlmaLinux:8
From an advisory covering 2 CVEs
before 1.12.9-9.el8_10
1.12.9-9.el8_10
flatpak
TuxCare:OracleLinux:7
before 1.0.9-13.0.1.el7_9.tuxcare.els2
1.0.9-13.0.1.el7_9.tuxcare.els2
flatpak-builder
TuxCare:OracleLinux:7
before 1.0.0-13.0.1.el7_9.tuxcare.els2
1.0.0-13.0.1.el7_9.tuxcare.els2
flatpak-devel
TuxCare:OracleLinux:7
before 1.0.9-13.0.1.el7_9.tuxcare.els2
1.0.9-13.0.1.el7_9.tuxcare.els2
flatpak-libs
TuxCare:OracleLinux:7
before 1.0.9-13.0.1.el7_9.tuxcare.els2
1.0.9-13.0.1.el7_9.tuxcare.els2
flatpak
TuxCare:RHEL:7
before 1.0.9-13.0.1.el7_9.tuxcare.els2
1.0.9-13.0.1.el7_9.tuxcare.els2
flatpak-builder
TuxCare:RHEL:7
before 1.0.0-13.0.1.el7_9.tuxcare.els2
1.0.0-13.0.1.el7_9.tuxcare.els2
flatpak-devel
TuxCare:RHEL:7
before 1.0.9-13.0.1.el7_9.tuxcare.els2
1.0.9-13.0.1.el7_9.tuxcare.els2
flatpak-libs
TuxCare:RHEL:7
before 1.0.9-13.0.1.el7_9.tuxcare.els2
1.0.9-13.0.1.el7_9.tuxcare.els2
flatpak
Debian:12
All versions, plus listed versions
1.14.10-11.14.10-1~deb12u11.14.10-1~deb12u21.14.4-11.14.4-1+deb12u1
Show 45 moreShow less
1.14.4-1+deb12u1~bpo11+11.14.4-21.14.5-11.14.6-11.14.6-1~deb13u11.14.8-11.14.8-1~deb12u11.15.0-11.15.0-21.15.1-11.15.10-11.15.12-11.15.2-11.15.3-11.15.4-11.15.6-11.15.7-11.15.8-11.15.9-11.15.91-11.16.0-11.16.0-21.16.0-2~bpo12+11.16.1-11.16.1-1~bpo12+11.16.1-21.16.1-31.16.2-11.16.2-1~deb13u11.16.3-11.16.3-1~deb13u11.16.4-11.16.4-21.16.5-11.16.6-11.16.6-1~deb13u11.16.6-1~deb13u1~bpo12+11.16.6-1~deb13u21.16.6-1~deb13u31.17.2-11.17.3-11.17.3-21.17.6-11.18.0-11.18.1-1
None known
flatpak
Debian:13
before 1.16.6-1~deb13u3, plus listed versions
1.16.1-11.16.1-21.16.1-31.16.2-11.16.2-1~deb13u1
Show 8 moreShow less
1.16.3-11.16.3-1~deb13u11.16.4-11.16.4-21.16.5-11.16.6-1~deb13u11.16.6-1~deb13u1~bpo12+11.16.6-1~deb13u2
1.16.6-1~deb13u3
flatpak
Debian:14
before 1.18.4-1, plus listed versions
1.16.1-11.16.1-21.16.1-31.16.2-11.16.2-1~deb13u1
Show 18 moreShow less
1.16.3-11.16.3-1~deb13u11.16.4-11.16.4-21.16.5-11.16.6-11.16.6-1~deb13u11.16.6-1~deb13u1~bpo12+11.16.6-1~deb13u21.16.6-1~deb13u31.17.2-11.17.3-11.17.3-21.17.6-11.18.0-11.18.1-11.18.2-11.18.3-1
1.18.4-1
flatpak
Mageia:10
From an advisory covering 6 CVEs
before 1.16.6-1.2.mga10
1.16.6-1.2.mga10
flatpak
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
before 0:1.16.0-9.el10_2.6
0:1.16.0-9.el10_2.6
flatpak-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
before 0:1.16.0-9.el10_2.6
0:1.16.0-9.el10_2.6
flatpak-debugsource
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
before 0:1.16.0-9.el10_2.6
0:1.16.0-9.el10_2.6
flatpak-libs
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
before 0:1.16.0-9.el10_2.6
0:1.16.0-9.el10_2.6
flatpak-libs-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
before 0:1.16.0-9.el10_2.6
0:1.16.0-9.el10_2.6
flatpak-selinux
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
before 0:1.16.0-9.el10_2.6
0:1.16.0-9.el10_2.6
flatpak-session-helper
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
before 0:1.16.0-9.el10_2.6
0:1.16.0-9.el10_2.6
flatpak-session-helper-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
before 0:1.16.0-9.el10_2.6
0:1.16.0-9.el10_2.6
flatpak-tests-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
before 0:1.16.0-9.el10_2.6
0:1.16.0-9.el10_2.6
flatpak-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
before 0:1.16.0-9.el10_2.6
0:1.16.0-9.el10_2.6
flatpak
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-4.el9_8.6
0:1.12.9-4.el9_8.6
flatpak-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-4.el9_8.6
0:1.12.9-4.el9_8.6
flatpak-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-4.el9_8.6
0:1.12.9-4.el9_8.6
flatpak-libs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-4.el9_8.6
0:1.12.9-4.el9_8.6
flatpak-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-4.el9_8.6
0:1.12.9-4.el9_8.6
flatpak-selinux
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-4.el9_8.6
0:1.12.9-4.el9_8.6
flatpak-session-helper
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-4.el9_8.6
0:1.12.9-4.el9_8.6
flatpak-session-helper-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-4.el9_8.6
0:1.12.9-4.el9_8.6
flatpak-tests-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-4.el9_8.6
0:1.12.9-4.el9_8.6
flatpak
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
before 0:1.12.9-4.el9_8.6
0:1.12.9-4.el9_8.6
flatpak-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
before 0:1.12.9-4.el9_8.6
0:1.12.9-4.el9_8.6
flatpak-debugsource
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
before 0:1.12.9-4.el9_8.6
0:1.12.9-4.el9_8.6
flatpak-devel
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
before 0:1.12.9-4.el9_8.6
0:1.12.9-4.el9_8.6
flatpak-libs-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
before 0:1.12.9-4.el9_8.6
0:1.12.9-4.el9_8.6
flatpak-session-helper
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
before 0:1.12.9-4.el9_8.6
0:1.12.9-4.el9_8.6
flatpak-session-helper-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
before 0:1.12.9-4.el9_8.6
0:1.12.9-4.el9_8.6
flatpak-tests-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
before 0:1.12.9-4.el9_8.6
0:1.12.9-4.el9_8.6
flatpak
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-9.el8_10
0:1.12.9-9.el8_10
flatpak-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-9.el8_10
0:1.12.9-9.el8_10
flatpak-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-9.el8_10
0:1.12.9-9.el8_10
flatpak-libs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-9.el8_10
0:1.12.9-9.el8_10
flatpak-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-9.el8_10
0:1.12.9-9.el8_10
flatpak-selinux
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-9.el8_10
0:1.12.9-9.el8_10
flatpak-session-helper
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-9.el8_10
0:1.12.9-9.el8_10
flatpak-session-helper-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-9.el8_10
0:1.12.9-9.el8_10
flatpak-tests-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-9.el8_10
0:1.12.9-9.el8_10
flatpak
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
before 0:1.12.9-9.el8_10
0:1.12.9-9.el8_10
flatpak-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
before 0:1.12.9-9.el8_10
0:1.12.9-9.el8_10
flatpak-debugsource
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
before 0:1.12.9-9.el8_10
0:1.12.9-9.el8_10
flatpak-devel
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
before 0:1.12.9-9.el8_10
0:1.12.9-9.el8_10
flatpak-libs-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
before 0:1.12.9-9.el8_10
0:1.12.9-9.el8_10
flatpak-session-helper
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
before 0:1.12.9-9.el8_10
0:1.12.9-9.el8_10
flatpak-session-helper-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
before 0:1.12.9-9.el8_10
0:1.12.9-9.el8_10
flatpak-tests-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
before 0:1.12.9-9.el8_10
0:1.12.9-9.el8_10
flatpak
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-4.el9_6.7
0:1.12.9-4.el9_6.7
flatpak-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-4.el9_6.7
0:1.12.9-4.el9_6.7
flatpak-debugsource
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-4.el9_6.7
0:1.12.9-4.el9_6.7
flatpak-libs
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-4.el9_6.7
0:1.12.9-4.el9_6.7
flatpak-libs-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-4.el9_6.7
0:1.12.9-4.el9_6.7
flatpak-selinux
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-4.el9_6.7
0:1.12.9-4.el9_6.7
flatpak-session-helper
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-4.el9_6.7
0:1.12.9-4.el9_6.7
flatpak-session-helper-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-4.el9_6.7
0:1.12.9-4.el9_6.7
flatpak-tests-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-4.el9_6.7
0:1.12.9-4.el9_6.7
flatpak
Red Hat:rhel_eus:9.6::crb
From an advisory covering 2 CVEs
before 0:1.12.9-4.el9_6.7
0:1.12.9-4.el9_6.7
flatpak-debuginfo
Red Hat:rhel_eus:9.6::crb
From an advisory covering 2 CVEs
before 0:1.12.9-4.el9_6.7
0:1.12.9-4.el9_6.7
flatpak-debugsource
Red Hat:rhel_eus:9.6::crb
From an advisory covering 2 CVEs
before 0:1.12.9-4.el9_6.7
0:1.12.9-4.el9_6.7
flatpak-devel
Red Hat:rhel_eus:9.6::crb
From an advisory covering 2 CVEs
before 0:1.12.9-4.el9_6.7
0:1.12.9-4.el9_6.7
flatpak-libs-debuginfo
Red Hat:rhel_eus:9.6::crb
From an advisory covering 2 CVEs
before 0:1.12.9-4.el9_6.7
0:1.12.9-4.el9_6.7
flatpak-session-helper
Red Hat:rhel_eus:9.6::crb
From an advisory covering 2 CVEs
before 0:1.12.9-4.el9_6.7
0:1.12.9-4.el9_6.7
flatpak-session-helper-debuginfo
Red Hat:rhel_eus:9.6::crb
From an advisory covering 2 CVEs
before 0:1.12.9-4.el9_6.7
0:1.12.9-4.el9_6.7
flatpak-tests-debuginfo
Red Hat:rhel_eus:9.6::crb
From an advisory covering 2 CVEs
before 0:1.12.9-4.el9_6.7
0:1.12.9-4.el9_6.7
flatpak
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
before 0:1.16.0-5.el10_0.8
0:1.16.0-5.el10_0.8
flatpak-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
before 0:1.16.0-5.el10_0.8
0:1.16.0-5.el10_0.8
flatpak-debugsource
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
before 0:1.16.0-5.el10_0.8
0:1.16.0-5.el10_0.8
flatpak-libs
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
before 0:1.16.0-5.el10_0.8
0:1.16.0-5.el10_0.8
flatpak-libs-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
before 0:1.16.0-5.el10_0.8
0:1.16.0-5.el10_0.8
flatpak-selinux
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
before 0:1.16.0-5.el10_0.8
0:1.16.0-5.el10_0.8
flatpak-session-helper
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
before 0:1.16.0-5.el10_0.8
0:1.16.0-5.el10_0.8
flatpak-session-helper-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
before 0:1.16.0-5.el10_0.8
0:1.16.0-5.el10_0.8
flatpak-tests-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
before 0:1.16.0-5.el10_0.8
0:1.16.0-5.el10_0.8
flatpak-devel
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
before 0:1.16.0-5.el10_0.8
0:1.16.0-5.el10_0.8
flatpak
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
before 0:1.12.7-5.el9_2.7
0:1.12.7-5.el9_2.7
flatpak-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
before 0:1.12.7-5.el9_2.7
0:1.12.7-5.el9_2.7
flatpak-debugsource
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
before 0:1.12.7-5.el9_2.7
0:1.12.7-5.el9_2.7
flatpak-libs
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
before 0:1.12.7-5.el9_2.7
0:1.12.7-5.el9_2.7
flatpak-libs-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
before 0:1.12.7-5.el9_2.7
0:1.12.7-5.el9_2.7
flatpak-selinux
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
before 0:1.12.7-5.el9_2.7
0:1.12.7-5.el9_2.7
flatpak-session-helper
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
before 0:1.12.7-5.el9_2.7
0:1.12.7-5.el9_2.7
flatpak-session-helper-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
before 0:1.12.7-5.el9_2.7
0:1.12.7-5.el9_2.7
flatpak-tests-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
before 0:1.12.7-5.el9_2.7
0:1.12.7-5.el9_2.7
flatpak
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-3.el9_4.7
0:1.12.9-3.el9_4.7
flatpak-debuginfo
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-3.el9_4.7
0:1.12.9-3.el9_4.7
flatpak-debugsource
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-3.el9_4.7
0:1.12.9-3.el9_4.7
flatpak-libs
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-3.el9_4.7
0:1.12.9-3.el9_4.7
flatpak-libs-debuginfo
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-3.el9_4.7
0:1.12.9-3.el9_4.7
flatpak-selinux
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-3.el9_4.7
0:1.12.9-3.el9_4.7
flatpak-session-helper
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-3.el9_4.7
0:1.12.9-3.el9_4.7
flatpak-session-helper-debuginfo
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-3.el9_4.7
0:1.12.9-3.el9_4.7
flatpak-tests-debuginfo
Red Hat:rhel_e4s:9.4::appstream
From an advisory covering 2 CVEs
before 0:1.12.9-3.el9_4.7
0:1.12.9-3.el9_4.7
flatpak
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
before 0:1.12.9-6.el9_9.5
0:1.12.9-6.el9_9.5
flatpak-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
before 0:1.12.9-6.el9_9.5
0:1.12.9-6.el9_9.5
flatpak-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
before 0:1.12.9-6.el9_9.5
0:1.12.9-6.el9_9.5
flatpak-libs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
before 0:1.12.9-6.el9_9.5
0:1.12.9-6.el9_9.5
flatpak-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
before 0:1.12.9-6.el9_9.5
0:1.12.9-6.el9_9.5
flatpak-selinux
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
before 0:1.12.9-6.el9_9.5
0:1.12.9-6.el9_9.5
flatpak-session-helper
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
before 0:1.12.9-6.el9_9.5
0:1.12.9-6.el9_9.5
flatpak-session-helper-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
before 0:1.12.9-6.el9_9.5
0:1.12.9-6.el9_9.5
flatpak-tests-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
before 0:1.12.9-6.el9_9.5
0:1.12.9-6.el9_9.5
flatpak
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
before 0:1.12.9-6.el9_9.5
0:1.12.9-6.el9_9.5
flatpak-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
before 0:1.12.9-6.el9_9.5
0:1.12.9-6.el9_9.5
flatpak-debugsource
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
before 0:1.12.9-6.el9_9.5
0:1.12.9-6.el9_9.5
flatpak-devel
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
before 0:1.12.9-6.el9_9.5
0:1.12.9-6.el9_9.5
flatpak-libs-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
before 0:1.12.9-6.el9_9.5
0:1.12.9-6.el9_9.5
flatpak-session-helper
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
before 0:1.12.9-6.el9_9.5
0:1.12.9-6.el9_9.5
flatpak-session-helper-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
before 0:1.12.9-6.el9_9.5
0:1.12.9-6.el9_9.5
flatpak-tests-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
before 0:1.12.9-6.el9_9.5
0:1.12.9-6.el9_9.5
flatpak
Red Hat:enterprise_linux:10.3
From an advisory covering 6 CVEs
before 0:1.18.0-2.el10_3.4
0:1.18.0-2.el10_3.4
flatpak-debuginfo
Red Hat:enterprise_linux:10.3
From an advisory covering 6 CVEs
before 0:1.18.0-2.el10_3.4
0:1.18.0-2.el10_3.4
flatpak-debugsource
Red Hat:enterprise_linux:10.3
From an advisory covering 6 CVEs
before 0:1.18.0-2.el10_3.4
0:1.18.0-2.el10_3.4
flatpak-libs
Red Hat:enterprise_linux:10.3
From an advisory covering 6 CVEs
before 0:1.18.0-2.el10_3.4
0:1.18.0-2.el10_3.4
flatpak-libs-debuginfo
Red Hat:enterprise_linux:10.3
From an advisory covering 6 CVEs
before 0:1.18.0-2.el10_3.4
0:1.18.0-2.el10_3.4
flatpak-selinux
Red Hat:enterprise_linux:10.3
From an advisory covering 6 CVEs
before 0:1.18.0-2.el10_3.4
0:1.18.0-2.el10_3.4
flatpak-session-helper
Red Hat:enterprise_linux:10.3
From an advisory covering 6 CVEs
before 0:1.18.0-2.el10_3.4
0:1.18.0-2.el10_3.4
flatpak-session-helper-debuginfo
Red Hat:enterprise_linux:10.3
From an advisory covering 6 CVEs
before 0:1.18.0-2.el10_3.4
0:1.18.0-2.el10_3.4
flatpak-tests-debuginfo
Red Hat:enterprise_linux:10.3
From an advisory covering 6 CVEs
before 0:1.18.0-2.el10_3.4
0:1.18.0-2.el10_3.4
flatpak-devel
Red Hat:enterprise_linux:10.3
From an advisory covering 6 CVEs
before 0:1.18.0-2.el10_3.4
0:1.18.0-2.el10_3.4
flatpak
Rocky Linux:10
From an advisory covering 2 CVEs
before 0:1.16.0-9.el10_2.6
0:1.16.0-9.el10_2.6
flatpak
Rocky Linux:9
From an advisory covering 2 CVEs
before 0:1.12.9-4.el9_8.6
0:1.12.9-4.el9_8.6
flatpak
Rocky Linux:8
From an advisory covering 2 CVEs
before 0:1.12.9-9.el8_10
0:1.12.9-9.el8_10
flatpak
Rocky Linux:9
From an advisory covering 6 CVEs
before 0:1.12.9-6.el9_9.5
0:1.12.9-6.el9_9.5
flatpak-debuginfo
Rocky Linux:9
From an advisory covering 6 CVEs
before 0:1.12.9-6.el9_9.5
0:1.12.9-6.el9_9.5
flatpak-debugsource
Rocky Linux:9
From an advisory covering 6 CVEs
before 0:1.12.9-6.el9_9.5
0:1.12.9-6.el9_9.5
flatpak-devel
Rocky Linux:9
From an advisory covering 6 CVEs
before 0:1.12.9-6.el9_9.5
0:1.12.9-6.el9_9.5
flatpak-libs
Rocky Linux:9
From an advisory covering 6 CVEs
before 0:1.12.9-6.el9_9.5
0:1.12.9-6.el9_9.5
flatpak-libs-debuginfo
Rocky Linux:9
From an advisory covering 6 CVEs
before 0:1.12.9-6.el9_9.5
0:1.12.9-6.el9_9.5
flatpak-session-helper
Rocky Linux:9
From an advisory covering 6 CVEs
before 0:1.12.9-6.el9_9.5
0:1.12.9-6.el9_9.5
flatpak-session-helper-debuginfo
Rocky Linux:9
From an advisory covering 6 CVEs
before 0:1.12.9-6.el9_9.5
0:1.12.9-6.el9_9.5
flatpak-selinux
Rocky Linux:9
From an advisory covering 6 CVEs
before 0:1.12.9-6.el9_9.5
0:1.12.9-6.el9_9.5
flatpak-debugsource
Rocky Linux:10
From an advisory covering 6 CVEs
before 0:1.18.0-2.el10_3.4
0:1.18.0-2.el10_3.4
flatpak-libs
Rocky Linux:10
From an advisory covering 6 CVEs
before 0:1.18.0-2.el10_3.4
0:1.18.0-2.el10_3.4
flatpak-debuginfo
Rocky Linux:10
From an advisory covering 6 CVEs
before 0:1.18.0-2.el10_3.4
0:1.18.0-2.el10_3.4
flatpak-session-helper
Rocky Linux:10
From an advisory covering 6 CVEs
before 0:1.18.0-2.el10_3.4
0:1.18.0-2.el10_3.4
flatpak-session-helper-debuginfo
Rocky Linux:10
From an advisory covering 6 CVEs
before 0:1.18.0-2.el10_3.4
0:1.18.0-2.el10_3.4
flatpak-libs-debuginfo
Rocky Linux:10
From an advisory covering 6 CVEs
before 0:1.18.0-2.el10_3.4
0:1.18.0-2.el10_3.4
flatpak-devel
Rocky Linux:10
From an advisory covering 6 CVEs
before 0:1.18.0-2.el10_3.4
0:1.18.0-2.el10_3.4
flatpak
Rocky Linux:10
From an advisory covering 6 CVEs
before 0:1.18.0-2.el10_3.4
0:1.18.0-2.el10_3.4
flatpak-selinux
Rocky Linux:10
From an advisory covering 6 CVEs
before 0:1.18.0-2.el10_3.4
0:1.18.0-2.el10_3.4
flatpak
Ubuntu:Pro:18.04:LTS
All versions, plus listed versions
0.8.7-50.10.0-10.10.0-20.10.1-10.10.2-1
Show 16 moreShow less
0.10.2.1-10.10.2.1-20.10.3-10.11.1-0ubuntu10.11.3-20.11.3-30.11.7-0ubuntu0.11.0.1-0ubuntu0.11.0.6-0ubuntu0.11.0.7-0ubuntu0.18.04.11.0.8-0ubuntu0.18.04.11.0.9-0ubuntu0.11.0.9-0ubuntu0.21.0.9-0ubuntu0.31.0.9-0ubuntu0.41.0.9-0ubuntu0.4+esm1
None known
flatpak
Ubuntu:Pro:20.04:LTS
All versions, plus listed versions
1.4.3-11.6.0-11.6.1-11.6.2-11.6.3-1
Show 6 moreShow less
1.6.5-0ubuntu0.11.6.5-0ubuntu0.21.6.5-0ubuntu0.31.6.5-0ubuntu0.41.6.5-0ubuntu0.51.6.5-0ubuntu0.5+esm1
None known
flatpak
Ubuntu:Pro:22.04:LTS
All versions, plus listed versions
1.10.2-31.12.2-11.12.2-21.12.3-11.12.4-1
Show 5 moreShow less
1.12.5-11.12.6-11.12.7-11.12.7-1ubuntu0.11.12.7-1ubuntu0.1+esm1
None known
flatpak
Ubuntu:Pro:24.04:LTS
All versions, plus listed versions
1.14.4-21.14.5-11.14.5-1build11.14.5-1build41.14.5-1build5
Show 4 moreShow less
1.14.5-1build61.14.6-11.14.6-1ubuntu0.11.14.6-1ubuntu0.1+esm1
None known
flatpak
Ubuntu:26.10
All versions, plus listed versions
1.16.6-11.18.0-11.18.1-11.18.2-11.18.4-1
None known
flatpak
Ubuntu:26.04:LTS
All versions, plus listed versions
1.16.1-2ubuntu11.16.1-3ubuntu11.16.2-11.16.3-11.16.3-1build11.16.4-11.16.4-21.16.6-1
None known
flatpak
openSUSE:Tumbleweed
From an advisory covering 6 CVEs
before 1.18.4-1.1
1.18.4-1.1

What each source reports

CVE List Score used7.1

Flatpak: flatpak: arbitrary file deletion in root context via path traversal in deploy directory export/bin

A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause deletion of attacker-chosen files outside the deployment directory when the app is installed or upgraded. In system-wide installations, the deletion is performed as root.

Record
CVE-2026-97023
CVSS 3.1
7.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Weakness
CWE-61
Updated
2026-11-11
EUVDEUVD-2026-884427.1

A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause deletion of attacker-chosen files outside the deployment directory when the app is installed or upgraded. In system-wide installations, the deletion is performed as root.

Record
EUVD-2026-88442
CVSS 3.1
7.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Updated
2026-11-11
NVD7.1

A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause deletion of attacker-chosen files outside the deployment directory when the app is installed or upgraded. In system-wide installations, the deletion is performed as root.

Record
CVE-2026-97023
CVSS 3.1
7.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Weakness
CWE-61
Updated
2026-11-11
OSVDEBIAN-CVE-2026-970237.1

A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause deletion of attacker-chosen files outside the deployment directory when the app is installed or upgraded. In system-wide installations, the deletion is performed as root.

Record
DEBIAN-CVE-2026-97023
CVSS 3.1
7.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Updated
2026-11-12
OSVRHSA-2026:898497.1

Red Hat Security Advisory: flatpak security update

Record
RHSA-2026:89849
CVSS 3.1
7.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Updated
2026-11-13
OSVRHSA-2026:898507.1

Red Hat Security Advisory: flatpak security update

Record
RHSA-2026:89850
CVSS 3.1
7.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Updated
2026-11-13
Show 20 moreShow less
OSVRHSA-2026:898597.1

Red Hat Security Advisory: flatpak security update

Record
RHSA-2026:89859
CVSS 3.1
7.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Updated
2026-11-13
OSVRHSA-2026:950617.1

Red Hat Security Advisory: flatpak security update

Record
RHSA-2026:95061
CVSS 3.1
7.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Updated
2026-11-13
OSVRHSA-2026:950627.1

Red Hat Security Advisory: flatpak security update

Record
RHSA-2026:95062
CVSS 3.1
7.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Updated
2026-11-13
OSVRHSA-2026:950637.1

Red Hat Security Advisory: flatpak security update

Record
RHSA-2026:95063
CVSS 3.1
7.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Updated
2026-11-13
OSVRHSA-2026:950647.1

Red Hat Security Advisory: flatpak security update

Record
RHSA-2026:95064
CVSS 3.1
7.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Updated
2026-11-13
OSVRHSA-2026:984908.8

Red Hat Security Advisory: flatpak security update

Record
RHSA-2026:98490
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-13
OSVRHSA-2026:985958.8

Red Hat Security Advisory: flatpak security update

Record
RHSA-2026:98595
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-13
OSVRLSA-2026:898497.1

Important: flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

Security Fix(es):

  • flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin (CVE-2026-97023)

  • flatpak: flatpak: Arbitrary write in root context via path traversal in deploy directory files/etc (CVE-2026-97024)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:89849
CVSS 3.1
7.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVRLSA-2026:898507.1

Important: flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

Security Fix(es):

  • flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin (CVE-2026-97023)

  • flatpak: flatpak: Arbitrary write in root context via path traversal in deploy directory files/etc (CVE-2026-97024)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:89850
CVSS 3.1
7.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVRLSA-2026:898597.1

Important: flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

Security Fix(es):

  • flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin (CVE-2026-97023)

  • flatpak: flatpak: Arbitrary write in root context via path traversal in deploy directory files/etc (CVE-2026-97024)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:89859
CVSS 3.1
7.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVRLSA-2026:984908.8

Important: flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

Security Fix(es):

  • flatpak: Flatpak: Arbitrary code execution via missing symlink protection (CVE-2026-90616)

  • flatpak: flatpak: Arbitrary write access as root via extra-data extraction (CVE-2026-96275)

  • flatpak: flatpak: Buffer overflow in OCI delta stream path names on 32-bit systems (CVE-2026-96280)

  • flatpak: Flatpak: Local privilege escalation via symlink traversal in revokefs writer (CVE-2026-96808)

  • flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin (CVE-2026-97023)

  • flatpak: flatpak: Arbitrary write in root context via path traversal in deploy directory files/etc (CVE-2026-97024)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:98490
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-13
OSVRLSA-2026:985958.8

Important: flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

Security Fix(es):

  • flatpak: Flatpak: Arbitrary code execution via missing symlink protection (CVE-2026-90616)

  • flatpak: flatpak: Arbitrary write access as root via extra-data extraction (CVE-2026-96275)

  • flatpak: flatpak: Buffer overflow in OCI delta stream path names on 32-bit systems (CVE-2026-96280)

  • flatpak: Flatpak: Local privilege escalation via symlink traversal in revokefs writer (CVE-2026-96808)

  • flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin (CVE-2026-97023)

  • flatpak: flatpak: Arbitrary write in root context via path traversal in deploy directory files/etc (CVE-2026-97024)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:98595
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-13
OSVUBUNTU-CVE-2026-970237.1

A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause deletion of attacker-chosen files outside the deployment directory when the app is installed or upgraded. In system-wide installations, the deletion is performed as root.

Record
UBUNTU-CVE-2026-97023
CVSS 3.1
7.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVALSA-2026:89849No score

Important: flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

Security Fix(es):

  • flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin (CVE-2026-97023)
  • flatpak: flatpak: Arbitrary write in root context via path traversal in deploy directory files/etc (CVE-2026-97024)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:89849
Updated
2026-11-02
OSVALSA-2026:89850No score

Important: flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

Security Fix(es):

  • flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin (CVE-2026-97023)
  • flatpak: flatpak: Arbitrary write in root context via path traversal in deploy directory files/etc (CVE-2026-97024)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:89850
Updated
2026-11-02
OSVALSA-2026:89859No score

Important: flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

Security Fix(es):

  • flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin (CVE-2026-97023)
  • flatpak: flatpak: Arbitrary write in root context via path traversal in deploy directory files/etc (CVE-2026-97024)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:89859
Updated
2026-11-02
OSVCLSA-2026-1792769619No score

flatpak: Fix of CVE-2026-97023

  • CVE-2026-97023: fix arbitrary file deletion during deploy, where a malicious ostree commit with "export" as a symlink made the path-based export/bin cleanup delete files at the symlink target
Record
CLSA-2026-1792769619
Updated
2026-11-02
OSVCLSA-2026-1792769794No score

flatpak: Fix of CVE-2026-97023

  • CVE-2026-97023: fix arbitrary file deletion during deploy, where a malicious ostree commit with "export" as a symlink made the path-based export/bin cleanup delete files at the symlink target
Record
CLSA-2026-1792769794
Updated
2026-11-02
OSVMGASA-2026-0477No score

Updated flatpak package fixes security vulnerabilities

Arbitrary file deletion in root context via path traversal in deploy directory export/bin. (CVE-2026-97023) Arbitrary write in root context via path traversal in deploy directory files/etc. (CVE-2026-97024) World-readable oci authentication token in system-helper cache path. (CVE-2026-97025) World-writable temporary child repositories in system-helper cache path. (CVE-2026-97026) Denial of service via unsanitized keys in exported desktop entry / d-bus service files. (CVE-2026-97027) Sandboxed app can signal unsandboxed processes in the same process group. (CVE-2026-97029)

Record
MGASA-2026-0477
Updated
2026-11-02
OSVopenSUSE-SU-2026:11918-1No score

flatpak-1.18.4-1.1 on GA media

These are all security issues fixed in the flatpak-1.18.4-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11918-1
Updated
2026-11-02

History

History
RecordedChangedSources
affected, aliases, referencesOSV
affected, aliases, referencesEUVD, NVD, OSV
referencesCVE List, EUVD
referencesCVE List
affectedNVD, OSV
products, referencesEUVD, NVD
referencesCVE List
products, referencesEUVD
referencesCVE List, NVD
products, referencesEUVD
facts, products, referencesCVE List
first indexedCVE List, EUVD, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 71 moreShow less
This page doesn't list everything

Left out here: 3 versions. The JSON record has them.

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open