# Flatpak vulnerabilities Source: https://junglewise.ai/threats/vendors/flatpak Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/flatpak.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 18 vulnerabilities in Flatpak: 0 in the last 7 days and 13 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-55889, was published on 23 October 2026. 3 vulnerabilities in the last four weeks, down 67% on the four before (9). 0 critical against 1. 3 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 3 - Last 90 days: 13 - All time: 18 (2 critical, 0 exploited in the wild) ## About Flatpak An open-source project providing a sandboxed application packaging and distribution framework for Linux. ## Latest Flatpak vulnerabilities - [CVE-2026-55889: XDG Desktop Portal predictable token generation in FileTransfer](https://junglewise.ai/threats/cve-2026-55889-xdg-desktop-portal-is-a-desktop-integration-portal-prior-to) (info, published 23 Oct 2026) - [CVE-2026-55888: XDG Desktop Portal arbitrary file access in FileChooser.SaveFiles](https://junglewise.ai/threats/cve-2026-55888-xdg-desktop-portal-is-a-desktop-integration-portal-prior-to) (info, published 23 Oct 2026) - [CVE-2026-92162: Flatpak path traversal in system-helper via crafted architecture name](https://junglewise.ai/threats/cve-2026-92162-flatpak-is-a-system-for-building-distributing-and-running) (info, published 20 Oct 2026) - [CVE-2026-94422: xdg-dbus-proxy message filtering bypass in D-Bus proxy](https://junglewise.ai/threats/cve-2026-94422-an-incorrect-implementation-of-message-filtering-in-xdg-dbus) (high, CVSS 8.8, published 2 Oct 2026) - [CVE-2026-97029: Flatpak process ID namespace isolation bypass](https://junglewise.ai/threats/cve-2026-97029-flatpak-s-process-id-namespace-separation-does-not-prevent-a) (medium, CVSS 5.7, published 29 Sep 2026) - [CVE-2026-97024: Flatpak path traversal in files/etc directory during app deployment](https://junglewise.ai/threats/cve-2026-97024-a-path-traversal-vulnerability-in-flatpak-s-handling-of-the-files) (high, CVSS 7.1, published 29 Sep 2026) - [CVE-2026-97023: Flatpak path traversal in export/bin directory handling](https://junglewise.ai/threats/cve-2026-97023-a-path-traversal-vulnerability-in-flatpak-s-handling-of-the) (high, CVSS 7.1, published 28 Sep 2026) - [CVE-2026-96280: Flatpak heap buffer overflow in OCI delta stream parser](https://junglewise.ai/threats/cve-2026-96280-the-oci-delta-stream-parser-read-sizes-as-guint64-but-passed-them) (high, CVSS 7.5, published 27 Sep 2026) - [CVE-2026-96279: Flatpak arbitrary file disclosure via OCI registry hardlink](https://junglewise.ai/threats/cve-2026-96279-a-malicious-oci-registry-can-hardlink-arbitrary-host-files-into) (medium, CVSS 6.5, published 27 Sep 2026) - [CVE-2026-96276: Flatpak path traversal in build-init extension handling](https://junglewise.ai/threats/cve-2026-96276-if-a-malicious-sdk-container-declares-an-extension-point-with-a) (critical, CVSS 9.8, published 23 Sep 2026) - [CVE-2026-96275: Flatpak arbitrary file write via path traversal in extra-data extraction](https://junglewise.ai/threats/cve-2026-96275-a-malicious-or-compromised-flatpak-repository-can-write-attacker) (high, CVSS 8.8, published 23 Sep 2026) - [CVE-2026-86320: flatpak-builder arbitrary code execution via Git hooks in patch sources](https://junglewise.ai/threats/cve-2026-86320-flatpak-builder-arbitrary-code-execution-via-git-hooks-in-patch) (high, CVSS 7.8, published 17 Sep 2026) - [CVE-2026-76925: Flatpak TOCTOU race condition in SystemHelper](https://junglewise.ai/threats/cve-2026-76925-flatpak-toctou-race-condition-in-systemhelper) (medium, CVSS 5.8, published 4 Sep 2026) - [CVE-2026-40354: Flatpak xdg-desktop-portal symlink attack in Trash portal](https://junglewise.ai/threats/cve-2026-40354-flatpak-xdg-desktop-portal-symlink-attack-in-trash-portal) (low, CVSS 2.9, published 11 Apr 2026) - [CVE-2026-39977: flatpak-builder is a tool to build flatpaks from source. From 1.4.5 to before 1.4.8, the license-files manifest key…](https://junglewise.ai/threats/cve-2026-39977-flatpak-builder-is-a-tool-to-build-flatpaks-from-source-from-1-4) (medium, CVSS 6.3, published 9 Apr 2026) - [CVE-2026-34079: Flatpak arbitrary file deletion via ld.so cache path traversal](https://junglewise.ai/threats/cve-2026-34079-flatpak-arbitrary-file-deletion-via-ld-so-cache-path-traversal) (high, CVSS 7.5, published 7 Apr 2026) - [CVE-2026-34078: Flatpak sandbox escape via symlink following in sandbox-expose](https://junglewise.ai/threats/cve-2026-34078-flatpak-sandbox-escape-via-symlink-following-in-sandbox-expose) (critical, CVSS 10, published 7 Apr 2026) - [CVE-2026-34080: Flatpak xdg-dbus-proxy policy parser bypass in eavesdrop restrictions](https://junglewise.ai/threats/cve-2026-34080-flatpak-xdg-dbus-proxy-policy-parser-bypass-in-eavesdrop) (medium, CVSS 5.5, published 7 Apr 2026) ## Most severe Flatpak vulnerabilities - [CVE-2026-34078: Flatpak sandbox escape via symlink following in sandbox-expose](https://junglewise.ai/threats/cve-2026-34078-flatpak-sandbox-escape-via-symlink-following-in-sandbox-expose) (critical, CVSS 10, published 7 Apr 2026) - [CVE-2026-96276: Flatpak path traversal in build-init extension handling](https://junglewise.ai/threats/cve-2026-96276-if-a-malicious-sdk-container-declares-an-extension-point-with-a) (critical, CVSS 9.8, published 23 Sep 2026) - [CVE-2026-94422: xdg-dbus-proxy message filtering bypass in D-Bus proxy](https://junglewise.ai/threats/cve-2026-94422-an-incorrect-implementation-of-message-filtering-in-xdg-dbus) (high, CVSS 8.8, published 2 Oct 2026) - [CVE-2026-96275: Flatpak arbitrary file write via path traversal in extra-data extraction](https://junglewise.ai/threats/cve-2026-96275-a-malicious-or-compromised-flatpak-repository-can-write-attacker) (high, CVSS 8.8, published 23 Sep 2026) - [CVE-2026-86320: flatpak-builder arbitrary code execution via Git hooks in patch sources](https://junglewise.ai/threats/cve-2026-86320-flatpak-builder-arbitrary-code-execution-via-git-hooks-in-patch) (high, CVSS 7.8, published 17 Sep 2026) - [CVE-2026-34079: Flatpak arbitrary file deletion via ld.so cache path traversal](https://junglewise.ai/threats/cve-2026-34079-flatpak-arbitrary-file-deletion-via-ld-so-cache-path-traversal) (high, CVSS 7.5, published 7 Apr 2026) - [CVE-2026-96280: Flatpak heap buffer overflow in OCI delta stream parser](https://junglewise.ai/threats/cve-2026-96280-the-oci-delta-stream-parser-read-sizes-as-guint64-but-passed-them) (high, CVSS 7.5, published 27 Sep 2026) - [CVE-2026-97024: Flatpak path traversal in files/etc directory during app deployment](https://junglewise.ai/threats/cve-2026-97024-a-path-traversal-vulnerability-in-flatpak-s-handling-of-the-files) (high, CVSS 7.1, published 29 Sep 2026) - [CVE-2026-97023: Flatpak path traversal in export/bin directory handling](https://junglewise.ai/threats/cve-2026-97023-a-path-traversal-vulnerability-in-flatpak-s-handling-of-the) (high, CVSS 7.1, published 28 Sep 2026) - [CVE-2026-96279: Flatpak arbitrary file disclosure via OCI registry hardlink](https://junglewise.ai/threats/cve-2026-96279-a-malicious-oci-registry-can-hardlink-arbitrary-host-files-into) (medium, CVSS 6.5, published 27 Sep 2026) ## Vulnerabilities per week 3 vulnerabilities in the last four weeks, down 67% on the four before (9). 0 critical against 1. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 1 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 1 | 0 | 0 | | 21 Sep 2026 | 4 | 1 | 0 | | 28 Sep 2026 | 4 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 3 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Flatpak technologies - [Flatpak](https://junglewise.ai/threats/technologies/flatpak): 12 vulnerabilities - [Flatpak-Builder](https://junglewise.ai/threats/technologies/flatpak-builder): 3 vulnerabilities - [Flatpak Xdg-Desktop-Portal](https://junglewise.ai/threats/technologies/xdg-desktop-portal): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Flatpak vulnerabilities", https://junglewise.ai/threats/vendors/flatpak, 9 November 2026.