Skip to content
Threat Feed
Subscribe

Product

Flatpak

3 briefs RSS
high advisory

Path Traversal and Arbitrary File Write in Flatpak

A vulnerability in Flatpak's extract_extra_data() allows malicious repositories to perform path traversal and write arbitrary files to the host filesystem, potentially leading to root access on system-wide installations.

Flatpak linux vulnerability path-traversal heap-overflow
3t 1c updated
high advisory

Linux AppArmor Bypass via aa-exec (CVE-2026-46331)

Adversaries can exploit CVE-2026-46331 to bypass AppArmor and unprivileged user namespace restrictions on Linux systems by abusing the `aa-exec` utility with `trinity`, `chrome`, or `flatpak` AppArmor profiles, leading to privilege escalation when the `aa-exec` binary itself is executed from a non-standard path.

AppArmor +8 linux privilege-escalation cve endpoint
1r 1t 1c 3i updated
critical advisory

Red Hat Enterprise Linux Flatpak Multiple Vulnerabilities Allow Code Execution and File Deletion

An authenticated attacker can exploit multiple vulnerabilities in the Flatpak package of Red Hat Enterprise Linux to execute arbitrary program code and delete files.

Flatpak rhel vulnerability code_execution file_deletion
2r 1t