High severity7.1NVD Advisory· Published Sep 28, 2026· Updated Nov 11, 2026
CVE-2026-97023
CVE-2026-97023
Description
A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause deletion of attacker-chosen files outside the deployment directory when the app is installed or upgraded. In system-wide installations, the deletion is performed as root.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7- osv-coords6 versionspkg:rpm/almalinux/flatpak-libspkg:rpm/almalinux/flatpakpkg:rpm/almalinux/flatpak-develpkg:rpm/almalinux/flatpak-session-helperpkg:rpm/opensuse/flatpak&distro=openSUSE%20Tumbleweedpkg:rpm/almalinux/flatpak-selinux
< 1.16.0-9.el10_2.6+ 5 more
- (no CPE)range: < 1.16.0-9.el10_2.6
- (no CPE)range: < 1.16.0-9.el10_2.6
- (no CPE)range: < 1.16.0-9.el10_2.6
- (no CPE)range: < 1.16.0-9.el10_2.6
- (no CPE)range: < 1.18.4-1.1
- (no CPE)range: < 1.16.0-9.el10_2.6
Patches
Vulnerability mechanics
References
12- access.redhat.com/errata/RHSA-2026:89849nvd
- access.redhat.com/errata/RHSA-2026:89850nvd
- access.redhat.com/errata/RHSA-2026:89859nvd
- access.redhat.com/errata/RHSA-2026:95061nvd
- access.redhat.com/errata/RHSA-2026:95062nvd
- access.redhat.com/errata/RHSA-2026:95063nvd
- access.redhat.com/errata/RHSA-2026:95064nvd
- access.redhat.com/errata/RHSA-2026:98490nvd
- access.redhat.com/errata/RHSA-2026:98595nvd
- access.redhat.com/security/cve/CVE-2026-97023nvd
- bugzilla.redhat.com/show_bug.cginvd
- github.com/flatpak/flatpak/security/advisories/GHSA-5p67-xh8x-rq54nvd
News mentions
1- Flatpak: Twelve Vulnerabilities Disclosed in Deployment and OCI HandlingVypr Intelligence · Sep 29, 2026