<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: flatpak</title><description>Every new CVE for flatpak.</description><link>https://agentprime.io/</link><item><title>CVE-2026-92162: Flatpak vulnerable to path traversal via unvalidated &quot;arch&quot; parameter in DeployAppstream</title><link>https://agentprime.io/advisories/CVE-2026-92162/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-92162/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 20 Oct 2026 14:39:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-96808: Flatpak: In Flatpak before 1.18.1, the revokefs writer…</title><link>https://agentprime.io/advisories/CVE-2026-96808/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-96808/</guid><description>CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 23 Sep 2026 16:58:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-96807: Flatpak: In Flatpak before 1.18.1, a malicious sandboxed app can replace ~/.var/app/$appid/.ld.so…</title><link>https://agentprime.io/advisories/CVE-2026-96807/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-96807/</guid><description>CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 23 Sep 2026 16:54:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-90616: Flatpak: In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write…</title><link>https://agentprime.io/advisories/CVE-2026-90616/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-90616/</guid><description>CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 12 Sep 2026 20:00:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-34079: Flatpak affected by arbitrary file deletion on the host filesystem</title><link>https://agentprime.io/advisories/CVE-2026-34079/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-34079/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 07 Apr 2026 21:29:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-34078: Flatpak has a complete sandbox escape leading to host file access and code execution in the host context</title><link>https://agentprime.io/advisories/CVE-2026-34078/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-34078/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 07 Apr 2026 21:27:45 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-42472: Flatpak may allow access to files outside sandbox for certain apps</title><link>https://agentprime.io/advisories/CVE-2024-42472/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-42472/</guid><description>CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 15 Aug 2024 18:32:11 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-32462: Flatpak vulnerable to a sandbox escape via RequestBackground portal due to bad argument parsing</title><link>https://agentprime.io/advisories/CVE-2024-32462/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-32462/</guid><description>CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 18 Apr 2024 18:11:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-28101: Flatpak metadata with ANSI control codes can cause misleading terminal output</title><link>https://agentprime.io/advisories/CVE-2023-28101/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-28101/</guid><description>CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Mar 2023 15:55:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-28100: TIOCLINUX can send commands outside sandbox if running on a virtual console</title><link>https://agentprime.io/advisories/CVE-2023-28100/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-28100/</guid><description>CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Mar 2023 15:51:32 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2022-21682: flatpak-builder can access files outside the build directory.</title><link>https://agentprime.io/advisories/CVE-2022-21682/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-21682/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 13 Jan 2022 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-43860: Permissions granted to applications can be hidden from the user at install time</title><link>https://agentprime.io/advisories/CVE-2021-43860/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-43860/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 12 Jan 2022 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-41133: Sandbox bypass via recent VFS-manipulating syscalls</title><link>https://agentprime.io/advisories/CVE-2021-41133/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-41133/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 08 Oct 2021 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-21381: Sandbox escape via special tokens in .desktop file</title><link>https://agentprime.io/advisories/CVE-2021-21381/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-21381/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 11 Mar 2021 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-21261: Flatpak sandbox escape via spawn portal</title><link>https://agentprime.io/advisories/CVE-2021-21261/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-21261/</guid><description>CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 14 Jan 2021 19:40:21 GMT</pubDate><category>CVE</category></item></channel></rss>