Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

Flatpak could let malicious code run

published 18 days ago
Summary

The Flatpak package used for Linux app isolation has a security weakness that could let attackers run unwanted code on a system. This could affect any Linux machines using Flatpak, potentially compromising data or system stability. Update Flatpak to the latest version or apply the vendor's recommended patch as soon as possible.

What to do
  • Update cleanstart flatpak to version 1.14.10-r0.
Affected software
Ecosystem VendorProductAffected versions
CleanStart cleanstart flatpak < 1.14.10-r0
Fix: upgrade to 1.14.10-r0
Original advisory text
Flatpak is a Linux application sandboxing and distribution framework
Security vulnerability affects the flatpak package. Flatpak is a Linux application sandboxing and distribution framework.
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
10.0 Critical
Timeline
Published1 Oct 2026
Updated1 Oct 2026
First seen1 Oct 2026
Sources
Track software like this
Free during beta