Path Traversal Vulnerability in Flatpak Affecting System Files
CVE-2026-97024

7.1HIGH

Key Information:

Vendor

Red Hat
Status
Red Hat Enterprise Linux 10
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 8
Red Hat Enterprise Linux 9
Vendor
CVE Published:
29 September 2026

What is CVE-2026-97024?

A path traversal vulnerability in the Flatpak application deployment process can allow a malicious Flatpak app to manipulate sensitive host system files, such as empting or replacing critical configuration files like passwd, group, machine-id, and resolv.conf. This issue may lead to severe disruptions in the system's integrity and security, especially in environments where applications are deployed system-wide with elevated privileges. Proper security measures must be implemented to mitigate the risks associated with this vulnerability during app installations and upgrades.

References

https://access.redhat.com/security/cve/CVE-2026-97024
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2542625
issue-trackingx_refsource_REDHAT
https://github.com/flatpak/flatpak/security/advisories/GH...

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Red Hat would like to thank Sebastian Wick for reporting this issue.
.