Advisories · Technology
flatpak.
Every CVE that names flatpak among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
Flatpak vulnerable to path traversal via unvalidated "arch" parameter in DeployAppstream
- flatpak
- Path traversal
- CVSS 7.4 High
Flatpak: In Flatpak before 1.18.1, the revokefs writer…
- Flatpak
- CWE-61
- CVSS 4.0 Medium
Flatpak: In Flatpak before 1.18.1, a malicious sandboxed app can replace ~/.var/app/$appid/.ld.so…
- Flatpak
- CWE-61
- CVSS 7.4 High
Flatpak: In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write…
- Flatpak
- CWE-61
- CVSS 8.7 High
Flatpak affected by arbitrary file deletion on the host filesystem
- flatpak
- Path traversal
- CVSS 9.3 CriticalCritical · CVSS 9+
Flatpak has a complete sandbox escape leading to host file access and code execution in the host context
- flatpak
- Path traversal
- CWE-61
- CVSS 10.0 CriticalCritical · CVSS 9+
Flatpak may allow access to files outside sandbox for certain apps
- flatpak
- Other injection
- CVSS 8.4 High
Flatpak vulnerable to a sandbox escape via RequestBackground portal due to bad argument parsing
- flatpak
- Command injection
- CVSS 5.0 Medium
Flatpak metadata with ANSI control codes can cause misleading terminal output
- flatpak
- CWE-116
- CVSS 10.0 CriticalCritical · CVSS 9+
TIOCLINUX can send commands outside sandbox if running on a virtual console
- flatpak
- CWE-20
- CVSS 7.7 High
flatpak-builder can access files outside the build directory.
- flatpak
- Path traversal
- CVSS 8.2 High
Permissions granted to applications can be hidden from the user at install time
- flatpak
- Privilege escalation
- CVSS 8.8 High
Sandbox bypass via recent VFS-manipulating syscalls
- flatpak
- CWE-20
- CVSS 7.1 High
Sandbox escape via special tokens in .desktop file
- flatpak
- Other injection
- CVSS 7.3 High
Flatpak sandbox escape via spawn portal
- flatpak
- Other injection