Skip to content
OpenAdvisories
High DSA-4868-1 1 CVE

flatpak - security update

Published Mar 12, 2021 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 10 flatpak 1.2.5-0+deb10u4

Vulnerabilities 1

  • High 7.1

    Sandbox escape via special tokens in .desktop file

    Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In Flatpack since version 0.9.4 and before version 1.10.2 has a vulnerability in the "file forwarding" feature which can be used by an attacker to gain access…