← Back

Xdg Desktop Portal

xdg-desktop-portal

Vendor: Flatpak • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-40354
1Flatpak
1Xdg Desktop Portal
Apr 27, 2026
Apr 11, 2026
N/A· v4
6.3 MEDIUM· v3
N/A· v2
Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app to trash any file in the host context via a symlink attack on g_file_trash.