High severity7.1NVD Advisory· Published Jun 29, 2026· Updated Aug 14, 2026
CVE-2026-13601
CVE-2026-13601
Description
A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) implementation provided by yelp-xsl. A malicious Flatpak application can open crafted help content through the OpenURI portal. By embedding an untrusted CSS stylesheet within a structured SVG document, attacker-controlled content can bypass Flatpak's intended sandbox isolation, allowing Yelp to evaluate local XML inclusions and disclose arbitrary user-readable host files through remote CSS resource requests. This may result in the unauthorized disclosure of sensitive information.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
- osv-coords4 versionspkg:rpm/almalinux/yelppkg:rpm/almalinux/yelp-develpkg:rpm/almalinux/yelp-libspkg:rpm/opensuse/yelp&distro=openSUSE%20Leap%2016.0
< 2:3.28.1-3.el8_10.2+ 3 more
- (no CPE)range: < 2:3.28.1-3.el8_10.2
- (no CPE)range: < 2:3.28.1-3.el8_10.2
- (no CPE)range: < 2:3.28.1-3.el8_10.2
- (no CPE)range: < 42.3-160000.3.1
Patches
Vulnerability mechanics
References
13- gitlab.gnome.org/GNOME/yelp/-/commit/c8c8244c8a812860782d635890c9b6c43ecc2639nvdPatch
- access.redhat.com/security/cve/CVE-2026-13601nvdVendor Advisory
- blogs.gnome.org/mcatanzaro/2026/05/11/flatpak-sandbox-escape-via-yelp/nvdThird Party Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingVendor Advisory
- security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-13601.jsonnvdVendor Advisory
- access.redhat.com/errata/RHSA-2026:47177nvd
- access.redhat.com/errata/RHSA-2026:47178nvd
- access.redhat.com/errata/RHSA-2026:54539nvd
- access.redhat.com/errata/RHSA-2026:54540nvd
- access.redhat.com/errata/RHSA-2026:54605nvd
- access.redhat.com/errata/RHSA-2026:54624nvd
- access.redhat.com/errata/RHSA-2026:54637nvd
- access.redhat.com/errata/RHSA-2026:54666nvd
News mentions
0No linked articles in our index yet.