Loading story…
Flatpak released 1.16.4 to fix four security issues affecting earlier versions, led by CVE-2026-34078, a critical flaw in the flatpak-portal D-Bus service that can let a malicious sandboxed app escape confinement, access arbitrary host files, and potentially execute code in the host context. The bug stems from acceptance of app-controlled symlinked sandbox-expose paths that are resolved and mounted from the host into the sandbox. Flatpak also patched CVE-2026-34079, which allows arbitrary file deletion on the host through improper validation during ld.so cache cleanup, along with a low-severity arbitrary file-read issue in the flatpak-system-helper context when a system OCI repository is configured and a cross-user CancelPull flaw.
The fixes were issued in Flatpak 1.16.4 and the development branch 1.17.4, with later 1.16.5 and 1.17.5 releases addressing regressions introduced by the critical patch; the fixes are also slated for 1.18.0. Multiple Linux distributions, including Debian, Ubuntu, SUSE, RHEL, Gentoo, Arch, and Fedora, were reported as affected or tracking updates, and Debian published a security advisory for Flatpak. Flatpak and downstream advisories urged administrators to upgrade promptly, while temporary mitigation for the sandbox-escape issue included disabling or masking the Flatpak Portal, with the warning that some applications may stop working correctly.
See real exploitation activity before you spend the cycle.
6 events from the most recent confirmed update back to the earliest known activity.
Debian published security advisory DSA 6207-1 for Flatpak, indicating a distribution-level security update in response to the disclosed vulnerabilities. The reference provides the advisory identifier and publication date.
In an oss-sec reply, Simon McVittie said Flatpak maintainers were unsure whether the arbitrary read issue in the flatpak-system-helper context constituted a real vulnerability and handled it conservatively without assigning a CVE. He added that he could not identify a realistic scenario where files readable by the unprivileged helper account would not already be readable by the user running Flatpak.
An oss-sec post disclosed four Flatpak security issues affecting versions prior to 1.16.4 and said fixes were introduced in 1.16.4 and 1.17.4. The post also noted that follow-up releases 1.16.5 and 1.17.5 addressed regressions caused by the critical CVE-2026-34078 fix.
Flatpak released version 1.16.4 to address four vulnerabilities, including critical CVE-2026-34078, CVE-2026-34079, an arbitrary read issue in flatpak-system-helper, and a cross-user CancelPull flaw. Administrators were advised to upgrade to the patched release.
CVE-2026-34078 and CVE-2026-34079 were published, documenting a critical sandbox escape and an arbitrary file deletion vulnerability affecting Flatpak versions prior to 1.16.4. The records note that both issues were fixed in Flatpak 1.16.4.
GitHub security advisories were published for CVE-2026-34078, a complete sandbox escape, and CVE-2026-34079, an arbitrary host file deletion flaw in Flatpak. Both advisories state the issues were patched in Flatpak 1.16.4 and are expected to be included in the upcoming 1.18.0 release.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
9 references tracked. Mallory keeps watching after this page renders.
lists.debian.org
Open sourceseclists.org
Open sourceseclists.org
Open sourcehelpnetsecurity.com
Open sourcecvefeed.io
Open sourcegithub.com
Open sourcegithub.com
Open sourcecvefeed.io
Open sourceopennet.me
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Flatpak released **1.18.4**, with the same fixes in development version **1.19.2**, to address high-impact flaws affecting its Linux application sandboxing and distribution framework. The updates prevent malicious applications from abusing privileged operations to overwrite or delete arbitrary host files, including attacks involving empty files or a symlink to `/run/host/monitor/resolv.conf`. They also stop authenticated OCI repository download tokens from being exposed to other local users, restrict unsafe fields in `.desktop` and D-Bus `.service` files, and prevent sandboxed applications from signaling process groups containing host parent processes, an action that could terminate the desktop environment. Earlier Flatpak **1.18.1** fixes addressed a broader set of symlink and path-traversal weaknesses, including sandbox escape conditions that enabled host filesystem read/write access, root-level arbitrary writes, arbitrary host-file reads, an anti-downgrade bypass, and a 32-bit buffer overflow. CVE assignments were published for the resolved issues, while two remained pending MITRE assignment at the time of the disclosure; a separate identifier, `CVE-2026-76925`, applies to a RHEL-specific backport issue rather than upstream Flatpak. Organizations should update deployed Flatpak installations to a fixed maintenance or development release and review systems where untrusted Flatpak applications may have run.
Sep 28, 2026
Canonical disclosed and patched three **snapd** vulnerabilities, led by **CVE-2026-8933**, a high-severity local privilege escalation flaw in **snap-confine** that can let a local user gain **root** on affected Ubuntu Desktop systems. Qualys reported that Ubuntu Desktop 26.04, 25.10, and fully updated 24.04 installations using the file-capabilities configuration for `snap-confine` are exposed because the process retains near-root capabilities while operating with the attacker’s effective UID, allowing attacker-owned files and directories to be created during a race window. The flaw can be exploited through symlink-based arbitrary file creation and permission changes, then by planting a malicious udev rule in an AppArmor-permitted path under `/run/udev/`, which can be triggered to execute attacker-controlled commands as root via `systemd-udevd`. Canonical also addressed **CVE-2026-15226**, a **snap-confine** sandbox confinement bypass caused by missing `setuid` restrictions in seccomp templates, which could let code running inside a strictly confined snap create or manipulate setuid binaries and weaken confinement boundaries. A third issue, **CVE-2024-5300**, involved an AppArmor base profile misconfiguration that could expose hashed passwords through `systemd-userdbd`. Fixes are scheduled in **snapd 2.76.1** and corresponding Ubuntu package updates for Xenial, Bionic, Focal, Jammy, Noble, and Resolute, with Canonical publishing advisory **USN-8579-1**; Qualys said it had a working exploit for CVE-2026-8933 but reported no evidence of active exploitation.
Aug 11, 2026
Germany’s Sovereign Tech Fund will invest **€508,640** in Flatpak over two years, funding security and platform-development work through the end of 2027. The initiative prioritizes stronger application sandboxing and expanded XDG portals, which broker sandboxed applications’ access to devices, system services, and other privileged resources without granting broad permissions. Planned development includes PipeWire-based audio portals, improved network isolation, and a VPN portal modeled on Android and iOS APIs. Flatpak will also pursue portals for spell-checking, writing assistance, browser NativeMessaging, and other service or device interactions, while exploring password autofill, static-permission entitlements, service-declaration intents, and `libdex` support for asynchronous application-service integrations.
Aug 28, 2026