Skip to content
OpenAdvisories

Vendor

Flatpak

20 known vulnerabilities.

Products

Flatpak 15 xdg-desktop-portal 3 xdg-dbus-proxy 1 flatpak-builder 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2026-92162 Public exploit

    Flatpak vulnerable to path traversal via unvalidated "arch" parameter in DeployAppstream

    Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Prior to version 1.18.1, on systems where at least one OCI remote is configured (most common on Fedora systems), a malicious local user in an active local ses…

    Flatpak Flatpak flatpak flatpak Debian Ubuntu
  • High 8.4
    CVE-2024-32462 Public exploit

    Flatpak vulnerable to a sandbox escape via RequestBackground portal due to bad argument parsing

    Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. in versions before 1.10.9, 1.12.9, 1.14.6, and 1.15.8, a malicious or compromised Flatpak app could execute arbitrary code outside its sandbox. Normally, the …

    Flatpak Flatpak flatpak flatpak Debian Ubuntu Alpine