Skip to content
Heist/ feed

Security feed

High

Flatpak: flatpak: arbitrary file deletion in root context via path traversal in deploy directory export/bin

Type: advisorySource: Official CVE List

A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause deletion of attacker-chosen files outside the deployment directory when th…