Skip to content
OpenAdvisories

Vendor

Flatpak

20 known vulnerabilities.

Products

Flatpak 15 xdg-desktop-portal 3 xdg-dbus-proxy 1 flatpak-builder 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.0
    CVE-2026-96807

    In Flatpak before 1.18.1, a malicious sandboxed app can replace ~/.var/app/$appid/.ld.so with a symlink, causing regene…

    Flatpak Flatpak flatpak flatpak Debian Ubuntu
  • Medium 6.8
    CVE-2026-34080

    xdg-dbus-proxy has an eavesdrop filter bypass allowing message interception

    xdg-dbus-proxy is a filtering proxy for D-Bus connections. Prior to 0.1.7, a policy parser vulnerability allows bypassing eavesdrop restrictions. The proxy checks for eavesdrop=true in policy rules but fails to handle eavesdrop ='true' (with a space before th…

    Flatpak xdg-dbus-proxy xdg-dbus-proxy xdg-dbus-proxy Debian Ubuntu
  • Medium 5.0
    CVE-2023-28101

    Flatpak metadata with ANSI control codes can cause misleading terminal output

    Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4, if an attacker publishes a Flatpak app with elevated permissions, they can hide those permissions fro…

    Flatpak Flatpak flatpak flatpak Debian Ubuntu