CVE-2026-97026

Published: Sep 28, 2026Modified: Sep 28, 2026

3.9

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L

Exploitability: 1.3 / Impact: 2.5

Source: secalert@redhat.com

Description

Flatpak creates temporary child repository directories under the user cache with world-writable permissions (0777). On multi-user systems with a permissive umask, other local users could read or modify the temporary directory used while installing apps or runtimes, potentially causing installation failures (denial of service); tampered content would fail signature/digest verification rather than being trusted.

Related CWEs

CWE-378

Creation of Temporary File With Insecure Permissions

Opening temporary files without appropriate measures or controls can leave the file, its contents and any function that it impacts vulnerable to attack.

References (3)

https://access.redhat.com/security/cve/CVE-2026-97026

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2542637

Source: secalert@redhat.com

https://github.com/flatpak/flatpak/security/advisories/GHSA-r9w3-qx54-qvc8

Source: secalert@redhat.com

Timeline

No history available yet.