CVE-2026-96282

EUVD-2026-88044
A malicious Flatpak extension can probe the host filesystem to determine what files and directories exist at arbitrary paths, and host directory listings can be disclosed to sandboxed applications using the extension. Additionally, unvalidated extension metadata can cause extension content to be mounted at unintended locations inside the sandbox.
Link Following
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
3.1 LOW
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 15.12%
Debian logo
Debian Releases
Debian Product
Codename
flatpak
bookworm
vulnerable
bookworm (security)
vulnerable
forky
1.18.4-1
fixed
sid
1.18.4-1
fixed
trixie
1.16.6-1~deb13u2
fixed
trixie (security)
1.16.6-1~deb13u3
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
flatpak
bionic
needs-triage
focal
needs-triage
jammy
needs-triage
noble
needs-triage
resolute
needs-triage
stonking
not-affected
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
flatpak
suse enterprise desktop 15 SP7
1.16.6-150600.3.12.1
fixed
suse enterprise sap 12 SP5
1.4.2-3.15.1
fixed
suse enterprise sap 15 SP5
1.16.6-150500.3.21.1
fixed
suse enterprise sap 15 SP6
1.16.6-150600.3.12.1
fixed
suse enterprise sap 15 SP7
1.16.6-150600.3.12.1
fixed
suse enterprise server 12 SP5
1.4.2-3.15.1
fixed
suse enterprise server 15 SP5
1.16.6-150500.3.21.1
fixed
suse enterprise server 15 SP6
1.16.6-150600.3.12.1
fixed
suse enterprise server 15 SP7
1.16.6-150600.3.12.1
fixed
flatpak-devel
suse enterprise desktop 15 SP7
1.16.6-150600.3.12.1
fixed
suse enterprise sap 15 SP5
1.16.6-150500.3.21.1
fixed
suse enterprise sap 15 SP6
1.16.6-150600.3.12.1
fixed
suse enterprise sap 15 SP7
1.16.6-150600.3.12.1
fixed
suse enterprise server 15 SP5
1.16.6-150500.3.21.1
fixed
suse enterprise server 15 SP6
1.16.6-150600.3.12.1
fixed
suse enterprise server 15 SP7
1.16.6-150600.3.12.1
fixed
flatpak-remote-flathub
suse enterprise desktop 15 SP7
1.16.6-150600.3.12.1
fixed
suse enterprise sap 15 SP5
1.16.6-150500.3.21.1
fixed
suse enterprise sap 15 SP6
1.16.6-150600.3.12.1
fixed
suse enterprise sap 15 SP7
1.16.6-150600.3.12.1
fixed
suse enterprise server 15 SP5
1.16.6-150500.3.21.1
fixed
suse enterprise server 15 SP6
1.16.6-150600.3.12.1
fixed
suse enterprise server 15 SP7
1.16.6-150600.3.12.1
fixed
flatpak-zsh-completion
suse enterprise desktop 15 SP7
1.16.6-150600.3.12.1
fixed
suse enterprise sap 15 SP5
1.16.6-150500.3.21.1
fixed
suse enterprise sap 15 SP6
1.16.6-150600.3.12.1
fixed
suse enterprise sap 15 SP7
1.16.6-150600.3.12.1
fixed
suse enterprise server 15 SP5
1.16.6-150500.3.21.1
fixed
suse enterprise server 15 SP6
1.16.6-150600.3.12.1
fixed
suse enterprise server 15 SP7
1.16.6-150600.3.12.1
fixed
libflatpak0
suse enterprise desktop 15 SP7
1.16.6-150600.3.12.1
fixed
suse enterprise sap 12 SP5
1.4.2-3.15.1
fixed
suse enterprise sap 15 SP5
1.16.6-150500.3.21.1
fixed
suse enterprise sap 15 SP6
1.16.6-150600.3.12.1
fixed
suse enterprise sap 15 SP7
1.16.6-150600.3.12.1
fixed
suse enterprise server 12 SP5
1.4.2-3.15.1
fixed
suse enterprise server 15 SP5
1.16.6-150500.3.21.1
fixed
suse enterprise server 15 SP6
1.16.6-150600.3.12.1
fixed
suse enterprise server 15 SP7
1.16.6-150600.3.12.1
fixed
system-user-flatpak
suse enterprise desktop 15 SP7
1.16.6-150600.3.12.1
fixed
suse enterprise sap 15 SP5
1.16.6-150500.3.21.1
fixed
suse enterprise sap 15 SP6
1.16.6-150600.3.12.1
fixed
suse enterprise sap 15 SP7
1.16.6-150600.3.12.1
fixed
suse enterprise server 15 SP5
1.16.6-150500.3.21.1
fixed
suse enterprise server 15 SP6
1.16.6-150600.3.12.1
fixed
suse enterprise server 15 SP7
1.16.6-150600.3.12.1
fixed
typelib-1_0-Flatpak-1_0
suse enterprise desktop 15 SP7
1.16.6-150600.3.12.1
fixed
suse enterprise sap 12 SP5
1.4.2-3.15.1
fixed
suse enterprise sap 15 SP5
1.16.6-150500.3.21.1
fixed
suse enterprise sap 15 SP6
1.16.6-150600.3.12.1
fixed
suse enterprise sap 15 SP7
1.16.6-150600.3.12.1
fixed
suse enterprise server 12 SP5
1.4.2-3.15.1
fixed
suse enterprise server 15 SP5
1.16.6-150500.3.21.1
fixed
suse enterprise server 15 SP6
1.16.6-150600.3.12.1
fixed
suse enterprise server 15 SP7
1.16.6-150600.3.12.1
fixed
Common Weakness Enumeration
References
https://access.redhat.com/security/cve/CVE-2026-96282
https://bugzilla.redhat.com/show_bug.cgi?id=2539422
https://github.com/flatpak/flatpak/security/advisories/GHSA-w69g-9x8j-7p8f