This vulnerability arises from an overly permissive Content Security Policy implementation in yelp-xsl, a component used by Yelp on Red Hat Enterprise Linux 10. A malicious Flatpak application can open specially crafted help content through the OpenURI portal, embedding untrusted CSS stylesheets inside structured SVG documents. This crafted content bypasses Flatpak's sandbox isolation, causing Yelp to evaluate local XML inclusions and disclose arbitrary user-readable host files through remote CSS resource requests. The flaw results in unauthorized information disclosure impacting confidentiality but does not affect integrity or availability. The CVSS 3.1 score is 7.1 (High) with attack vector local, low attack complexity, no privileges required, no user interaction, and scope changed.

Successful exploitation allows a local attacker with the ability to run a malicious Flatpak application to bypass sandbox restrictions and cause Yelp to disclose arbitrary user-readable files on the host system. This leads to unauthorized disclosure of sensitive information, impacting confidentiality. There is no impact on integrity or availability. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-13601 for current remediation guidance. No official fix or workaround is explicitly stated in the provided advisory content. Users should monitor the vendor advisory for updates and apply any released patches promptly once available. Until then, restricting installation of untrusted Flatpak applications may reduce risk.