# Flatpak vulnerabilities Source: https://junglewise.ai/threats/technologies/flatpak Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/flatpak.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 12 vulnerabilities in Flatpak: 0 in the last 7 days and 10 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-92162, was published on 20 October 2026. 1 vulnerability in the last four weeks, down 87% on the four before (8). 0 critical against 1. ## Counts - Last 7 days: 0 - Last 30 days: 1 - Last 90 days: 10 - All time: 12 (2 critical, 0 exploited in the wild) ## About Flatpak Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. ## Latest Flatpak vulnerabilities - [CVE-2026-92162: Flatpak path traversal in system-helper via crafted architecture name](https://junglewise.ai/threats/cve-2026-92162-flatpak-is-a-system-for-building-distributing-and-running) (info, published 20 Oct 2026) - [CVE-2026-97029: Flatpak process ID namespace isolation bypass](https://junglewise.ai/threats/cve-2026-97029-flatpak-s-process-id-namespace-separation-does-not-prevent-a) (medium, CVSS 5.7, published 29 Sep 2026) - [CVE-2026-97024: Flatpak path traversal in files/etc directory during app deployment](https://junglewise.ai/threats/cve-2026-97024-a-path-traversal-vulnerability-in-flatpak-s-handling-of-the-files) (high, CVSS 7.1, published 29 Sep 2026) - [CVE-2026-97023: Flatpak path traversal in export/bin directory handling](https://junglewise.ai/threats/cve-2026-97023-a-path-traversal-vulnerability-in-flatpak-s-handling-of-the) (high, CVSS 7.1, published 28 Sep 2026) - [CVE-2026-96281: Flatpak system-helper Flatpak downgrade via unprivileged RemoveLocalRef](https://junglewise.ai/threats/cve-2026-96281-on-a-multi-user-system-a-user-with-an-active-local-login-session) (info, published 27 Sep 2026) - [CVE-2026-96280: Flatpak heap buffer overflow in OCI delta stream parser](https://junglewise.ai/threats/cve-2026-96280-the-oci-delta-stream-parser-read-sizes-as-guint64-but-passed-them) (high, CVSS 7.5, published 27 Sep 2026) - [CVE-2026-96279: Flatpak arbitrary file disclosure via OCI registry hardlink](https://junglewise.ai/threats/cve-2026-96279-a-malicious-oci-registry-can-hardlink-arbitrary-host-files-into) (medium, CVSS 6.5, published 27 Sep 2026) - [CVE-2026-96276: Flatpak path traversal in build-init extension handling](https://junglewise.ai/threats/cve-2026-96276-if-a-malicious-sdk-container-declares-an-extension-point-with-a) (critical, CVSS 9.8, published 23 Sep 2026) - [CVE-2026-96275: Flatpak arbitrary file write via path traversal in extra-data extraction](https://junglewise.ai/threats/cve-2026-96275-a-malicious-or-compromised-flatpak-repository-can-write-attacker) (high, CVSS 8.8, published 23 Sep 2026) - [CVE-2026-76925: Flatpak TOCTOU race condition in SystemHelper](https://junglewise.ai/threats/cve-2026-76925-flatpak-toctou-race-condition-in-systemhelper) (medium, CVSS 5.8, published 4 Sep 2026) - [CVE-2026-34079: Flatpak arbitrary file deletion via ld.so cache path traversal](https://junglewise.ai/threats/cve-2026-34079-flatpak-arbitrary-file-deletion-via-ld-so-cache-path-traversal) (high, CVSS 7.5, published 7 Apr 2026) - [CVE-2026-34078: Flatpak sandbox escape via symlink following in sandbox-expose](https://junglewise.ai/threats/cve-2026-34078-flatpak-sandbox-escape-via-symlink-following-in-sandbox-expose) (critical, CVSS 10, published 7 Apr 2026) ## Most severe Flatpak vulnerabilities - [CVE-2026-34078: Flatpak sandbox escape via symlink following in sandbox-expose](https://junglewise.ai/threats/cve-2026-34078-flatpak-sandbox-escape-via-symlink-following-in-sandbox-expose) (critical, CVSS 10, published 7 Apr 2026) - [CVE-2026-96276: Flatpak path traversal in build-init extension handling](https://junglewise.ai/threats/cve-2026-96276-if-a-malicious-sdk-container-declares-an-extension-point-with-a) (critical, CVSS 9.8, published 23 Sep 2026) - [CVE-2026-96275: Flatpak arbitrary file write via path traversal in extra-data extraction](https://junglewise.ai/threats/cve-2026-96275-a-malicious-or-compromised-flatpak-repository-can-write-attacker) (high, CVSS 8.8, published 23 Sep 2026) - [CVE-2026-34079: Flatpak arbitrary file deletion via ld.so cache path traversal](https://junglewise.ai/threats/cve-2026-34079-flatpak-arbitrary-file-deletion-via-ld-so-cache-path-traversal) (high, CVSS 7.5, published 7 Apr 2026) - [CVE-2026-96280: Flatpak heap buffer overflow in OCI delta stream parser](https://junglewise.ai/threats/cve-2026-96280-the-oci-delta-stream-parser-read-sizes-as-guint64-but-passed-them) (high, CVSS 7.5, published 27 Sep 2026) - [CVE-2026-97024: Flatpak path traversal in files/etc directory during app deployment](https://junglewise.ai/threats/cve-2026-97024-a-path-traversal-vulnerability-in-flatpak-s-handling-of-the-files) (high, CVSS 7.1, published 29 Sep 2026) - [CVE-2026-97023: Flatpak path traversal in export/bin directory handling](https://junglewise.ai/threats/cve-2026-97023-a-path-traversal-vulnerability-in-flatpak-s-handling-of-the) (high, CVSS 7.1, published 28 Sep 2026) - [CVE-2026-96279: Flatpak arbitrary file disclosure via OCI registry hardlink](https://junglewise.ai/threats/cve-2026-96279-a-malicious-oci-registry-can-hardlink-arbitrary-host-files-into) (medium, CVSS 6.5, published 27 Sep 2026) - [CVE-2026-76925: Flatpak TOCTOU race condition in SystemHelper](https://junglewise.ai/threats/cve-2026-76925-flatpak-toctou-race-condition-in-systemhelper) (medium, CVSS 5.8, published 4 Sep 2026) - [CVE-2026-97029: Flatpak process ID namespace isolation bypass](https://junglewise.ai/threats/cve-2026-97029-flatpak-s-process-id-namespace-separation-does-not-prevent-a) (medium, CVSS 5.7, published 29 Sep 2026) ## Vulnerabilities per week 1 vulnerability in the last four weeks, down 87% on the four before (8). 0 critical against 1. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 1 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 5 | 1 | 0 | | 28 Sep 2026 | 3 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 1 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Flatpak technologies - [Flatpak-Builder](https://junglewise.ai/threats/technologies/flatpak-builder): 3 vulnerabilities - [Flatpak Xdg-Desktop-Portal](https://junglewise.ai/threats/technologies/xdg-desktop-portal): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Flatpak vulnerabilities", https://junglewise.ai/threats/technologies/flatpak, 9 November 2026.