CVE-2026-97026

Name of the Vulnerable Software and Affected Versions Flatpak (affected versions not specified)

Description Flatpak creates temporary child repository directories within the user cache using world-writable permissions (0777). On multi-user systems with a permissive umask (a file mode mask that determines default permissions for new files), local users may be able to read or modify these temporary directories during the installation of apps or runtimes. This could lead to installation failures, resulting in a denial of service. Any tampered content would fail signature or digest verification and would not be trusted.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.