WID-SEC-W-2026-1732

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Red Hat Enterprise Linux (Flatpak): Mehrere Schwachstellen

view advisory published 2026-05-28

Ein authentisierter Angreifer kann mehrere Schwachstellen im Flatpak Paket von Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen und um Dateien zu löschen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2026-34079UShigh7.5—
Flatpak is a Linux application sandboxing and distribution framework. Prior to 1.16.4, the caching for ld.so removes outdated cache files without properly checking that the app con…
CVE-2026-34078UScritical10.0—
Flatpak is a Linux application sandboxing and distribution framework. Prior to 1.16.4, the Flatpak portal accepts paths in the sandbox-expose options which can be app-controlled sy…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan