Product by Flatpak

    Flatpak

    19 known vulnerabilities in Flatpak (Flatpak), 0 of them actively exploited (CISA KEV).

    Key figures

    19

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Flatpak (Flatpak)
    CriticalCVE-2026-34078

    Flatpak: UNIX Symbolic Link (Symlink) Following

    also in 2 other products

    		10.0
    CriticalCVE-2019-10063

    Flatpak: security vulnerability

    		9.0
    CriticalCVE-2024-42472

    Flatpak may allow access to files outside sandbox for certain apps

    also in 2 other products

    		10.0
    HighCVE-2022-21682

    Flatpak: Path Traversal

    also in 4 other products

    		7.7
    HighCVE-2021-43860

    Permissions granted to applications can be hidden from the user at install time

    also in 4 other products

    		8.2
    HighCVE-2021-21381

    Sandbox escape via special tokens in .desktop file

    also in 3 other products

    		7.1
    CriticalCVE-2023-28100

    TIOCLINUX can send commands outside sandbox if running on a virtual console

    		10.0
    HighCVE-2026-92162

    Flatpak vulnerable to path traversal via unvalidated "arch" parameter in DeployAppstream

    also in 1 other product

    		—
    HighCVE-2026-96808

    Flatpak: UNIX Symbolic Link (Symlink) Following

    also in 2 other products

    		7.4
    HighCVE-2026-34079

    Flatpak affected by arbitrary file deletion on the host filesystem

    also in 2 other products

    		7.5
    HighCVE-2026-90616

    Flatpak: UNIX Symbolic Link (Symlink) Following

    also in 2 other products

    		7.4
    HighCVE-2024-32462

    Flatpak vulnerable to a sandbox escape via RequestBackground portal due to bad argument parsing

    also in 2 other products

    		8.4
    HighCVE-2021-41133

    Sandbox bypass via recent VFS-manipulating syscalls

    also in 3 other products

    		8.8
    MediumCVE-2023-28101

    Flatpak metadata with ANSI control codes can cause misleading terminal output

    		5.0
    HighCVE-2021-21261

    Flatpak sandbox escape via spawn portal

    also in 2 other products

    		7.3
    HighCVE-2018-6560

    Flatpak: security vulnerability

    also in 6 other products

    		8.8
    HighCVE-2019-8308

    Flatpak: security vulnerability

    also in 7 other products

    		8.2
    MediumCVE-2026-96807

    Flatpak: UNIX Symbolic Link (Symlink) Following

    also in 1 other product

    		4.0
    HighCVE-2017-9780

    Flatpak: security vulnerability

    also in 1 other product

    		7.8

    All products by Flatpak