Skip to content
OpenAdvisories

Package · Alpine

flatpak

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-34078

    Flatpak has a complete sandbox escape leading to host file access and code execution in the host context

    Flatpak is a Linux application sandboxing and distribution framework. Prior to 1.16.4, the Flatpak portal accepts paths in the sandbox-expose options which can be app-controlled symlinks pointing at arbitrary paths. Flatpak run mounts the resolved host path i…

    Flatpak Flatpak flatpak flatpak Debian Ubuntu Alpine
  • Critical 10.0
    CVE-2024-42472

    Flatpak may allow access to files outside sandbox for certain apps

    Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.14.0 and 1.15.10, a malicious or compromised Flatpak app using persistent directories could access and write files outside of what it would otherwise have access to, whi…

    Flatpak Flatpak flatpak flatpak Debian Ubuntu Alpine