Re: Flatpak 1.18.1 fixes multiple vulnerabilities
AI summary · grok-4.7Summaries by Vani AI
MITRE assigned CVE-2026-96808 and CVE-2026-96807 to Flatpak flaws fixed in 1.18.1.
Simon McVittie reported on oss-security that MITRE assigned CVE identifiers for two Flatpak issues fixed in version 1.18.1. CVE-2026-96808 corresponds to GHSA-qrwq-7qwx-q9rp, and CVE-2026-96807 corresponds to GHSA-99wv-m8rp-g58x. The note does not describe impact or exploitation.
Key facts
- CVE-2026-96808 maps to GHSA-qrwq-7qwx-q9rp.
- CVE-2026-96807 maps to GHSA-99wv-m8rp-g58x.
- Both identifiers cover issues fixed in Flatpak 1.18.1.
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-96808+1 related CVE | Symlink traversal in Flatpak revokefs allows local root privilege escalation | 7.4 group max | — |
From the original article
Posted by Simon McVittie on Sep 23 CVE-2026-96808 was allocated for GHSA-qrwq-7qwx-q9rp. CVE-2026-96807 was allocated for GHSA-99wv-m8rp-g58x. (Thanks to MITRE CNA-LR for these)
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.