Skip to content
Threat Feed
Subscribe

Tag

Flatpak

3 briefs RSS
high advisory

Path Traversal and Arbitrary File Write in Flatpak

A vulnerability in Flatpak's extract_extra_data() allows malicious repositories to perform path traversal and write arbitrary files to the host filesystem, potentially leading to root access on system-wide installations.

Flatpak linux vulnerability path-traversal heap-overflow
3t 1c updated
high advisory

PipeWire Vulnerability CVE-2026-5674 Allows Sandbox Escape and Arbitrary Code Execution

A critical vulnerability, CVE-2026-5674, exists in PipeWire, a multimedia server, enabling an attacker to escape sandboxed applications like Flatpak by exploiting its PulseAudio compatibility layer to load a malicious library, leading to arbitrary code execution outside the sandbox and potential system compromise.

PipeWire +2 sandbox-escape privilege-escalation arbitrary-code-execution linux flatpak
4t 1c
critical advisory

Red Hat Enterprise Linux Flatpak Multiple Vulnerabilities Allow Code Execution and File Deletion

An authenticated attacker can exploit multiple vulnerabilities in the Flatpak package of Red Hat Enterprise Linux to execute arbitrary program code and delete files.

Flatpak rhel vulnerability code_execution file_deletion
2r 1t