CVE-2026-107466

Name of the Vulnerable Software and Affected Versions flatpak-builder (affected versions not specified)

Description A flaw in flatpak-builder allows an attacker to cause information disclosure by convincing a user or continuous integration (CI) system to process a crafted build manifest. By specifying local file Uniform Resource Identifiers (URIs) within source download definitions, the builder bypasses directory confinement checks. This allows sensitive host files accessible to the build process to be read and incorporated into the build artifacts.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.