Skip to content
Fencer Intel
high 7.1

CVE-2026-97023 json

Flatpak: flatpak: arbitrary file deletion in root context via path traversal in deploy directory export/bin

published last mo. modified 14h ago also EUVD-2026-88442 , GHSA-5p67-xh8x-rq54

Unreviewed: the maintainers' own advisory

Published by the maintainers on their GitHub repository flatpak/flatpak. GitHub has not reviewed it into the GitHub Advisory Database, so the affected packages and versions are the maintainers' word. Read the full advisory on GitHub.

cvss
7.1
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.5%
EPSS 0.5% chance of exploitation in 30 days, percentile 40%
public exploits
0
none known

Summary

A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause deletion of attacker-chosen files outside the deployment directory when the app is installed or upgraded. In system-wide installations, the deletion is performed as root.

Patch / fix

  • Red Hat Red Hat Enterprise Linux 10 0:1.16.0-9.el10_2.6, 0:1.18.0-2.el10_3.4
  • Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support 0:1.16.0-5.el10_0.8
  • Red Hat Red Hat Enterprise Linux 8 0:1.12.9-9.el8_10
  • Red Hat Red Hat Enterprise Linux 9 0:1.12.9-4.el9_8.6, 0:1.12.9-6.el9_9.5
  • Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 0:1.12.7-5.el9_2.7
  • Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions 0:1.12.9-3.el9_4.7
  • Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support 0:1.12.9-4.el9_6.7
  • flatpak Debian 13 1.16.6-1~deb13u3
  • flatpak Debian 14 1.18.4-1

debian advisories DEBIAN-CVE-2026-97023

  • flatpak openSUSE Tumbleweed 1.18.4-1.1

opensuse advisories openSUSE-SU-2026:11918-1

  • flatpak AlmaLinux 10 1.16.0-9.el10_2.6
  • flatpak-libs AlmaLinux 10 1.16.0-9.el10_2.6
  • flatpak-selinux AlmaLinux 10 1.16.0-9.el10_2.6
  • flatpak-session-helper AlmaLinux 10 1.16.0-9.el10_2.6
  • flatpak AlmaLinux 9 1.12.9-4.el9_8.6
  • flatpak-session-helper AlmaLinux 9 1.12.9-4.el9_8.6
  • flatpak AlmaLinux 8 1.12.9-9.el8_10
  • flatpak-libs AlmaLinux 8 1.12.9-9.el8_10

almalinux advisories ALSA-2026:89849ALSA-2026:89850ALSA-2026:89859

  • flatpak Rocky Linux 10 1.16.0-9.el10_2.6
  • flatpak Rocky Linux 9 1.12.9-4.el9_8.6
  • flatpak Rocky Linux 8 1.12.9-9.el8_10

rocky linux advisories RLSA-2026:89849RLSA-2026:89850RLSA-2026:89859

Is CVE-2026-97023 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2026-97023 updated cvss 7.1

flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin

  • Red Hat Enterprise Linux 7 flatpak, flatpak-libs, flatpak-builder
    affected: workaround, no fix available “Avoid installing Flatpak apps from non-trusted publishers, particularly in system-wide deployments.”
  • Red Hat CodeReady Linux Builder EUS (v.9.6) flatpak 1.12.9-4.el9_6.7, flatpak-session-helper 1.12.9-4.el9_6.7
    fixed: vendor fix “Avoid installing Flatpak apps from non-trusted publishers, particularly in system-wide deployments.” RHSA-2026:95061
  • Red Hat Enterprise Linux AppStream (v. 8) flatpak 1.12.9-9.el8_10, flatpak-libs 1.12.9-9.el8_10, flatpak-selinux 1.12.9-9.el8_10, flatpak-session-helper 1.12.9-9.el8_10
    fixed: vendor fix “Avoid installing Flatpak apps from non-trusted publishers, particularly in system-wide deployments.” RHSA-2026:89859
  • Red Hat Enterprise Linux AppStream (v. 9) flatpak 1.12.9-4.el9_8.6, flatpak 1.12.9-6.el9_9.5, flatpak-libs 1.12.9-4.el9_8.6, flatpak-libs 1.12.9-6.el9_9.5, flatpak-selinux 1.12.9-4.el9_8.6, flatpak-selinux 1.12.9-6.el9_9.5, +2 more
    fixed: vendor fix “Avoid installing Flatpak apps from non-trusted publishers, particularly in system-wide deployments.” RHSA-2026:89850
  • Red Hat Enterprise Linux AppStream (v. 10) flatpak 1.16.0-9.el10_2.6, flatpak 1.18.0-2.el10_3.4, flatpak-libs 1.16.0-9.el10_2.6, flatpak-libs 1.18.0-2.el10_3.4, flatpak-selinux 1.16.0-9.el10_2.6, flatpak-selinux 1.18.0-2.el10_3.4, +2 more
    fixed: vendor fix “Avoid installing Flatpak apps from non-trusted publishers, particularly in system-wide deployments.” RHSA-2026:89849
  • Red Hat Enterprise Linux AppStream E4S (v.9.2) flatpak 1.12.7-5.el9_2.7, flatpak-libs 1.12.7-5.el9_2.7, flatpak-selinux 1.12.7-5.el9_2.7, flatpak-session-helper 1.12.7-5.el9_2.7
    fixed: vendor fix “Avoid installing Flatpak apps from non-trusted publishers, particularly in system-wide deployments.” RHSA-2026:95063
  • Red Hat Enterprise Linux AppStream E4S (v.9.4) flatpak 1.12.9-3.el9_4.7, flatpak-libs 1.12.9-3.el9_4.7, flatpak-selinux 1.12.9-3.el9_4.7, flatpak-session-helper 1.12.9-3.el9_4.7
    fixed: vendor fix “Avoid installing Flatpak apps from non-trusted publishers, particularly in system-wide deployments.” RHSA-2026:95064
  • Red Hat Enterprise Linux AppStream EUS (v. 10.0) flatpak 1.16.0-5.el10_0.8, flatpak-libs 1.16.0-5.el10_0.8, flatpak-selinux 1.16.0-5.el10_0.8, flatpak-session-helper 1.16.0-5.el10_0.8
    fixed: vendor fix “Avoid installing Flatpak apps from non-trusted publishers, particularly in system-wide deployments.” RHSA-2026:95062
show 5 more
  • Red Hat Enterprise Linux AppStream EUS (v.9.6) flatpak 1.12.9-4.el9_6.7, flatpak-libs 1.12.9-4.el9_6.7, flatpak-selinux 1.12.9-4.el9_6.7, flatpak-session-helper 1.12.9-4.el9_6.7
    fixed: vendor fix “Avoid installing Flatpak apps from non-trusted publishers, particularly in system-wide deployments.” RHSA-2026:95061
  • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) flatpak 1.12.9-4.el9_8.6, flatpak 1.12.9-6.el9_9.5, flatpak-session-helper 1.12.9-4.el9_8.6, flatpak-session-helper 1.12.9-6.el9_9.5
    fixed: vendor fix “Avoid installing Flatpak apps from non-trusted publishers, particularly in system-wide deployments.” RHSA-2026:89850
  • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) flatpak-devel 1.16.0-9.el10_2.6, flatpak-devel 1.18.0-2.el10_3.4, flatpak-debuginfo 1.16.0-9.el10_2.6, flatpak-debuginfo 1.18.0-2.el10_3.4, flatpak-debugsource 1.16.0-9.el10_2.6, flatpak-debugsource 1.18.0-2.el10_3.4, +6 more
    fixed: vendor fix “Avoid installing Flatpak apps from non-trusted publishers, particularly in system-wide deployments.” RHSA-2026:89849
  • Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) flatpak-devel 1.16.0-5.el10_0.8, flatpak-debuginfo 1.16.0-5.el10_0.8, flatpak-debugsource 1.16.0-5.el10_0.8, flatpak-libs-debuginfo 1.16.0-5.el10_0.8, flatpak-tests-debuginfo 1.16.0-5.el10_0.8, flatpak-session-helper-debuginfo 1.16.0-5.el10_0.8
    fixed: vendor fix “Avoid installing Flatpak apps from non-trusted publishers, particularly in system-wide deployments.” RHSA-2026:95062
  • Red Hat Enterprise Linux CRB (v. 8) flatpak 1.12.9-9.el8_10, flatpak-session-helper 1.12.9-9.el8_10
    fixed: vendor fix “Avoid installing Flatpak apps from non-trusted publishers, particularly in system-wide deployments.” RHSA-2026:89859

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
last mo.

Exploit prediction

0.46% chance of exploitation in the next 30 days, higher than 40% of all scored CVEs (FIRST EPSS, 2026-11-11).

CVSS scores

assigned by version score vector
CNA 3.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H

Affected products

  • Red Hat Red Hat Enterprise Linux 10
  • Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support
  • Red Hat Red Hat Enterprise Linux 8
  • Red Hat Red Hat Enterprise Linux 9
  • Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
  • Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions
  • Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support
  • Red Hat Red Hat Enterprise Linux 7

Classification

Weakness
  • CWE-61 UNIX Symbolic Link (Symlink) Following

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

The maintainers of flatpak/flatpak published their own advisory on GitHub. Reviewed sources take precedence over it.