Skip to content
Threat Feed
Subscribe

Tag

Flatpak

2 briefs RSS
high advisory

PipeWire Vulnerability CVE-2026-5674 Allows Sandbox Escape and Arbitrary Code Execution

A critical vulnerability, CVE-2026-5674, exists in PipeWire, a multimedia server, enabling an attacker to escape sandboxed applications like Flatpak by exploiting its PulseAudio compatibility layer to load a malicious library, leading to arbitrary code execution outside the sandbox and potential system compromise.

PipeWire +2 sandbox-escape privilege-escalation arbitrary-code-execution linux flatpak
4t 1c
critical advisory

Red Hat Enterprise Linux Flatpak Multiple Vulnerabilities Allow Code Execution and File Deletion

An authenticated attacker can exploit multiple vulnerabilities in the Flatpak package of Red Hat Enterprise Linux to execute arbitrary program code and delete files.

Flatpak rhel vulnerability code_execution file_deletion
2r 1t