CVE-2026-96282

Name of the Vulnerable Software and Affected Versions Flatpak (affected versions not specified)

Description A malicious extension can probe the host filesystem to determine the existence of files and directories at arbitrary paths. This allows host directory listings to be disclosed to sandboxed applications utilizing the extension. Furthermore, unvalidated extension metadata can lead to extension content being mounted at unintended locations within the sandbox.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.