AI analysis
CVE-2026-96275 is a path traversal vulnerability in Flatpak's extract_extra_data() function that allows writing attacker-controlled content to arbitrary locations on the host filesystem. The flaw is triggered when processing a malicious or compromised Flatpak repository that uses specially crafted `files/extra` paths (via symlinks) and `xa.extra-data-sources` blob names containing `..` traversal sequences. On system-wide Flatpak installations, this write operation occurs with root privileges, leading to a complete system compromise. The vulnerability affects all Flatpak versions prior to the fix in 1.18.1, and there are no known public exploits or in-the-wild exploitation as of the advisory.
What to do: Upgrade to Flatpak version 1.18.1 or later, as this version contains the fix for the path traversal vulnerability. Users should only install Flatpak applications from trusted repositories to avoid exposure to malicious repository definitions. System administrators should check for any unauthorized or suspicious Flatpak repositories configured on their hosts.
Affected
| Flatpak Project Flatpak | versions < 1.18.1 |
Estimated exposure
—No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description
A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host filesystem via extract_extra_data(). On system installs, the write happens as root. Two issues combine: `files/extra` is resolved via path operations that follow symlinks, and blob names from `xa.extra-data-sources` are not sanitized against `..` traversal.