CVE-2026-96279

Summary

A malicious OCI registry can hardlink arbitrary host files into the extraction directory when a user installs or updates a Flatpak application from an OCI remote, allowing disclosure of arbitrary host file contents. For system-wide installs running as root, this includes sensitive files such as /etc/shadow.

Affected Software

Weaknesses

• CWE-59: Improper Link Resolution Before File Access ('Link Following')

Workarounds

Only install applications from trusted OCI registries. Flatpak remotes using the default OSTree transport are not affected.

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://access.redhat.com/security/cve/CVE-2026-96279
• https://bugzilla.redhat.com/show_bug.cgi?id=2539417
• https://github.com/flatpak/flatpak/security/advisories/GHSA-9rww-v4mm-x4jg

• ←Previous
• Next→