Product by Flatpak

    Xdg-desktop-portal

    3 known vulnerabilities in Xdg-desktop-portal (Flatpak), 0 of them actively exploited (CISA KEV).

    Key figures

    3

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Xdg-desktop-portal (Flatpak)
    HighCVE-2026-55888

    XDG Desktop Portal: Arbitrary file access via SaveFiles "files" option path traversal

    		—
    HighCVE-2026-55889

    XDG Desktop Portal: Drag-and-drop and copy-paste theft via predictable FileTransfer key

    		—
    MediumCVE-2026-40354

    Flatpak Xdg-desktop-portal: UNIX Symbolic Link (Symlink) Following

    also in 1 other product

    		6.3

    All products by Flatpak