# CVE-2026-92162: Flatpak path traversal in system-helper via crafted architecture name

Source: https://junglewise.ai/threats/cve-2026-92162-flatpak-is-a-system-for-building-distributing-and-running  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-20. Updated: 2026-10-20  
License: CC BY 4.0 with a link back

CVE-2026-92162 · Severity: info · Published 2026-10-20

Flatpak is a sandboxing system that allows Linux users to run isolated desktop applications. On systems with OCI remotes configured, a malicious local user could exploit improper input validation to trick the system helper into creating root-owned files and directories outside their intended location, potentially leading to privilege escalation when combined with other vulnerabilities.

Technologies: [Flatpak](https://junglewise.ai/threats/technologies/flatpak). Vendors: [Flatpak](https://junglewise.ai/threats/vendors/flatpak).

## Quick answers

**Is CVE-2026-92162 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-92162 being exploited in the wild.

**How severe is CVE-2026-92162?** Informational severity, published 20 October 2026.

**Which products and versions are affected?** Flatpak before 1.18.1.

**Is there a fix for CVE-2026-92162?** Yes: fixed in 1.18.1. Until then: Disable or remove OCI remote configurations if not required for your use case, as the vulnerability is not exploitable on systems without OCI remotes configured. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-92162 attacked?** It is attacked with local access, in a network appliance.

**Am I affected by CVE-2026-92162?** Check whether you run Flatpak at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in 1.18.1

Disable or remove OCI remote configurations if not required for your use case, as the vulnerability is not exploitable on systems without OCI remotes configured.

## Technical details

A path traversal vulnerability in flatpak-system-helper allows local attackers to craft malicious architecture names that are passed to internal functions without proper validation, enabling creation of arbitrary directory trees and files with root ownership. The vulnerability requires at least one OCI remote to be configured and is triggered when a local user in an active session provides the crafted input. The fix validates remote names and architecture arguments before using them in path operations.

## Affected products

- Flatpak Flatpak before 1.18.1

## Timeline

- 2026-10-20: disclosed

## References

- [https://github.com/flatpak/flatpak/commit/01773f84021dd090b2426f79675f94f2564f9279](https://github.com/flatpak/flatpak/commit/01773f84021dd090b2426f79675f94f2564f9279)
- [https://github.com/flatpak/flatpak/commit/19456b916842b079af833a86b9ab89c5db154b92](https://github.com/flatpak/flatpak/commit/19456b916842b079af833a86b9ab89c5db154b92)

## Related threats

- [Flatpak process ID namespace isolation bypass](https://junglewise.ai/threats/cve-2026-97029-flatpak-s-process-id-namespace-separation-does-not-prevent-a)
- [Flatpak path traversal in files/etc directory during app deployment](https://junglewise.ai/threats/cve-2026-97024-a-path-traversal-vulnerability-in-flatpak-s-handling-of-the-files)
- [Flatpak path traversal in export/bin directory handling](https://junglewise.ai/threats/cve-2026-97023-a-path-traversal-vulnerability-in-flatpak-s-handling-of-the)
- [Flatpak heap buffer overflow in OCI delta stream parser](https://junglewise.ai/threats/cve-2026-96280-the-oci-delta-stream-parser-read-sizes-as-guint64-but-passed-them)
- [Flatpak arbitrary file disclosure via OCI registry hardlink](https://junglewise.ai/threats/cve-2026-96279-a-malicious-oci-registry-can-hardlink-arbitrary-host-files-into)