← Vulnerability feed

Vulnerability record · CVE-2026-34079 · published 7 April 2026

CVE-2026-34079: Flatpak path traversal vulnerability

Flatpak · Flatpak

Flatpak is a Linux application sandboxing and distribution framework. Prior to 1.16.4, the caching for ld.so removes outdated cache files without properly checking that the app controlled path to the outdated cache is in the cache directory. This allows Flatpak apps to delete arbitrary files on the host. This vulnerability is fixed in 1.16.4.

8.7 CVSS 4.0 High EPSS 0.44% · top 64.1% CWE-22 · Path traversal
8.7CVSS 4.0 base score
0.44%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
1References
24 Jul 2026Last modified by NVD

Description

Flatpak is a Linux application sandboxing and distribution framework. Prior to 1.16.4, the caching for ld.so removes outdated cache files without properly checking that the app controlled path to the outdated cache is in the cache directory. This allows Flatpak apps to delete arbitrary files on the host. This vulnerability is fixed in 1.16.4.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/flatpak/flatpak/security/advisories/GHSA-p29x-r292-46pp Vendor Advisory

Track CVE-2026-34079 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2024-42472Flatpak injection vulnerabilityFlatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.14.0 and 1.15.10, a malicious or compromised Flatpak app us…EPSS 1.3%9.3CVE-2026-34078Flatpak link following vulnerabilityFlatpak is a Linux application sandboxing and distribution framework. Prior to 1.16.4, the Flatpak portal accepts paths in the sandbox-expose options…EPSS 0.90%9.0CVE-2019-10063Flatpak improper input validation vulnerabilityFlatpak before 1.0.8, 1.1.x and 1.2.x before 1.2.4, and 1.3.x before 1.3.1 allows a sandbox bypass. Flatpak versions since 0.8.1 address CVE-2017-522…EPSS 1.9%8.8CVE-2021-21261Flatpak injection vulnerabilityFlatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. A bug was discovered in the `flatpak-portal` ser…EPSS 0.57%8.8CVE-2018-6560Flatpak interpretation conflict vulnerabilityIn dbus-proxy/flatpak-proxy.c in Flatpak before 0.8.9, and 0.9.x and 0.10.x before 0.10.3, crafted D-Bus messages to the host can be used to break ou…EPSS 0.41%8.6CVE-2021-43860Flatpak improper privilege management vulnerabilityFlatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.12.3 and 1.10.6, Flatpak doesn't properly validate that the…EPSS 1.3%8.4CVE-2024-32462Flatpak argument injection vulnerabilityFlatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. in versions before 1.10.9, 1.12.9, 1.14.6, and 1…EPSS 0.51%8.2CVE-2021-21381Flatpak injection vulnerabilityFlatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In Flatpack since version 0.9.4 and before versi…EPSS 1.5%

Source: NIST National Vulnerability Database (record CVE-2026-34079), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.