CVE-2026-96284

Name of the Vulnerable Software and Affected Versions Flatpak (affected versions not specified)

Description A malicious user can obtain read-access to files within the flatpak-system-helper context when a system OCI (Open Container Initiative) repository is configured. This occurs because the OCI code paths in the system helper follow symlinks during the import of OCI images that are under the user's control.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.