Description
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4 contain a vulnerability similar to CVE-2017-5226, but using the `TIOCLINUX` ioctl command instead of `TIOCSTI`. If a Flatpak app is run on a Linux virtual console such as `/dev/tty1`, it can copy text from the virtual console and paste it into the command buffer, from which the command might be run after the Flatpak app has exited. Ordinary graphical terminal emulators like xterm, gnome-terminal and Konsole are unaffected. This vulnerability is specific to the Linux virtual consoles `/dev/tty1`, `/dev/tty2` and so on. A patch is available in versions 1.10.8, 1.12.8, 1.14.4, and 1.15.4. As a workaround, don't run Flatpak on a Linux virtual console. Flatpak is primarily designed to be used in a Wayland or X11 graphical environment.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| flatpak | flatpak | < 1.10.8, >= 1.12.0, < 1.12.8, >= 1.14.0, < 1.14.4, >= 1.15.0, < 1.15.4 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | flatpak | 1.14.4-1 | — |
| Debian 13 | flatpak | 1.14.4-1 | — |
| Debian 12 | flatpak | 1.14.4-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | flatpak | No fix yet | — |
| Ubuntu 25.10 | flatpak | No fix yet | — |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 22.04 LTS | flatpak | No fix yet | — |
| Ubuntu Pro 20.04 LTS | flatpak | No fix yet | — |
| Ubuntu Pro 18.04 LTS | flatpak | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | flatpak +4 | 1.12.8-1.el9 | RHSA-2023:6518 |
| RHEL 8 | flatpak +4 | 1.10.8-1.el8 | RHSA-2023:7038 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | flatpak +4 | 1.12.8-1.el9 | ALSA-2023:6518 |
| AlmaLinux 8 | flatpak +4 | 1.10.8-1.el8 | ALSA-2023:7038 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | flatpak | 1.12.8-1.el9 | RLSA-2023:6518 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP4 | flatpak | 1.12.8-150400.3.3.1 | SUSE-SU-2023:1715-1 |
| SLES 15 SP3 | flatpak | 1.10.8-150200.4.15.1 | SUSE-SU-2023:1714-1 |
| SLES 15 SP2 | flatpak | 1.10.8-150200.4.15.1 | SUSE-SU-2023:1714-1 |
| SLES 15 SP1 | flatpak | 1.2.3-150100.4.11.1 | SUSE-SU-2023:1713-1 |
| SLES 12 SP5 | flatpak | 1.4.2-3.3.1 | SUSE-SU-2023:1712-1 |
Show 10 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 SP3 | flatpak | 1.10.8-150200.4.15.1 | SUSE-SU-2023:1714-1 |
| SLES for SAP 15 SP2 | flatpak | 1.10.8-150200.4.15.1 | SUSE-SU-2023:1714-1 |
| SLES for SAP 15 SP1 | flatpak | 1.2.3-150100.4.11.1 | SUSE-SU-2023:1713-1 |
| SLES for SAP 12 SP5 | flatpak | 1.4.2-3.3.1 | SUSE-SU-2023:1712-1 |
| SLE Real Time 15 SP3 | flatpak | 1.10.8-150200.4.15.1 | SUSE-SU-2023:1714-1 |
| SLE HPC 15 SP3 | flatpak | 1.10.8-150200.4.15.1 | SUSE-SU-2023:1714-1 |
| SLE HPC 15 SP2 | flatpak | 1.10.8-150200.4.15.1 | SUSE-SU-2023:1714-1 |
| SLE HPC 15 SP1 | flatpak | 1.2.3-150100.4.11.1 | SUSE-SU-2023:1713-1 |
| SUSE Enterprise Storage 7.1 | flatpak | 1.10.8-150200.4.15.1 | SUSE-SU-2023:1714-1 |
| SUSE Enterprise Storage 7 | flatpak | 1.10.8-150200.4.15.1 | SUSE-SU-2023:1714-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | flatpak | 1.14.4-1.1 | openSUSE-SU-2024:12800-1 |
| openSUSE Leap 15.4 | flatpak | 1.12.8-150400.3.3.1 | SUSE-SU-2023:1715-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | flatpak +2 | 1.0.9-10.amzn2.0.3 | ALAS2-2023-2134 |
| Amazon Linux 2 | flatpak-builder | 1.0.0-10.amzn2.0.3 | ALAS2-2023-2134 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | flatpak +4 | 1.12.8-1.el9 | ELSA-2023-6518 |
| Oracle Linux 8 | flatpak +4 | 1.10.8-1.el8 | ELSA-2023-7038 |
Advisories 14
- WID-SEC-2023-2853 Red Hat Enterprise Linux: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 8, 2026
- ALSA-2023:6518 Moderate: flatpak security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2023:7038 Moderate: flatpak security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2023:7038 Red Hat Security Advisory: flatpak security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2023:6518 Red Hat Security Advisory: flatpak security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RLSA-2023:6518 Moderate: flatpak security, bug fix, and enhancement update Rocky Linux Security Advisories · Feb 5, 2026
- SUSE-SU-2023:1715-1 Security update for flatpak SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:1714-1 Security update for flatpak SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:1712-1 Security update for flatpak SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:1713-1 Security update for flatpak SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:12800-1 flatpak-1.14.4-1.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025
- ELSA-2023-7038 Moderate: flatpak security, bug fix, and enhancement update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Nov 17, 2023
- ELSA-2023-6518 Moderate: flatpak security, bug fix, and enhancement update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Nov 11, 2023
- ALAS2-2023-2134 Moderate: flatpak security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Jul 19, 2023