Skip to content
OpenAdvisories
High DSA-5666-1 1 CVE

flatpak - security update

Published Apr 19, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 11 flatpak 1.10.8-0+deb11u2
Debian · 12 flatpak 1.14.4-1+deb12u1

Vulnerabilities 1

  • High 8.4
    CVE-2024-32462 Public exploit

    Flatpak vulnerable to a sandbox escape via RequestBackground portal due to bad argument parsing

    Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. in versions before 1.10.9, 1.12.9, 1.14.6, and 1.15.8, a malicious or compromised Flatpak app could execute arbitrary code outside its sandbox. Normally, the …

    Flatpak Flatpak flatpak flatpak Debian Ubuntu Alpine