flatpak vulnerabilities (Ubuntu)
32 vulnerabilities.
-
flatpakUbuntu Flatpak: flatpak: sandboxed app can signal unsandboxed processes in the same process group 5.7 Medium -
flatpakUbuntu Flatpak: flatpak: arbitrary write in root context via path traversal in deploy directory files/etc 7.1 High -
flatpakUbuntu Flatpak: flatpak: denial of service via unsanitized keys in exported desktop entry / d-bus service files 3.6 Low -
flatpakUbuntu Flatpak: flatpak: world-writable temporary child repositories in system-helper cache path 3.9 Low -
flatpakUbuntu Flatpak: flatpak: world-readable oci authentication token in system-helper cache path 3.2 Low -
flatpakUbuntu Flatpak: flatpak: arbitrary file deletion in root context via path traversal in deploy directory export/bin 7.1 High -
flatpakUbuntu Flatpak: flatpak: arbitrary read-access to files in the system-helper context via oci symlink following 2.5 Low -
flatpakUbuntu Flatpak: flatpak: extension metadata path traversal file existence oracle 3.1 Low -
flatpakUbuntu Flatpak: flatpak: flatpak-system-helper cross-user cancelpull orphans another user's ongoing pull 3.3 Low -
flatpakUbuntu Flatpak: flatpak: unprivileged active user can bypass anti-downgrade checks for system apps/runtimes 6.2 Medium -
flatpakUbuntu Flatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit systems 7.5 High -
flatpakUbuntu Flatpak: flatpak: path traversal issue in oci archive extraction via hardlinks 6.5 Medium -
flatpakUbuntu Important: flatpak security update 7.4 High -
flatpakUbuntu flatpak: Fix of CVE-2026-96807 4.0 Medium -
flatpakUbuntu Flatpak: flatpak: arbitrary write in host context via flatpak build-init 6.5 Medium -
flatpakUbuntu Flatpak: flatpak: arbitrary write access as root via extra-data extraction 8.8 High -
flatpakUbuntu Flatpak: flatpak: toctou race condition allows symlink redirection 5.8 Medium -
flatpakUbuntu Flatpak vulnerable to path traversal via unvalidated "arch" parameter in DeployAppstream 7.2 High -
flatpakUbuntu In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to... 7.4 High -
flatpakUbuntu Flatpak affected by arbitrary file deletion on the host filesystem 8.7 High -
flatpakUbuntu Flatpak has a complete sandbox escape leading to host file access and code execution in the host context 9.3 Critical -
flatpakUbuntu Flatpak may allow access to files outside sandbox for certain apps 10.0 Critical -
flatpakUbuntu Flatpak vulnerable to a sandbox escape via RequestBackground portal due to bad argument parsing 8.4 High -
flatpakUbuntu Flatpak metadata with ANSI control codes can cause misleading terminal output 5.0 Medium -
flatpakUbuntu TIOCLINUX can send commands outside sandbox if running on a virtual console 10.0 Critical -
flatpakUbuntu flatpak-builder can access files outside the build directory. 7.7 High -
flatpakUbuntu Permissions granted to applications can be hidden from the user at install time 8.2 High -
flatpakUbuntu Sandbox bypass via recent VFS-manipulating syscalls 8.8 High -
flatpakUbuntu Sandbox escape via special tokens in .desktop file 7.1 High -
flatpakUbuntu Flatpak sandbox escape via spawn portal 7.3 High -
flatpakUbuntu Flatpak before 1.0.8, 1.1.x and 1.2.x before 1.2.4, and 1.3.x before 1.3.1 allows a sandbox... 9.0 Critical -
flatpakUbuntu Flatpak before 1.0.7, and 1.1.x and 1.2.x before 1.2.3, exposes /proc in the apply_extra script... 8.2 High