CVE-2026-96283

Name of the Vulnerable Software and Affected Versions Flatpak (affected versions not specified)

Description A flaw exists in the flatpak-system-helper where calling the org.freedesktop.Flatpak.SystemHelper.CancelPull endpoint on a pull belonging to another user fails to actually cancel the operation. Instead, the pull is removed from internal tracking, which prevents the original owning user from being able to stop the ongoing pull.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.