This vulnerability (CVE-2026-40354) involves improper handling of symbolic links in Flatpak's xdg-desktop-portal, specifically in the g_file_trash function. Flatpak apps running in affected versions can exploit this to delete arbitrary files on the host system by creating symlinks that redirect the trash operation. The issue affects versions prior to 1.20.4 and 1.21.1. The CVSS 3.1 base score is 2.9, reflecting low impact with local attack vector, high attack complexity, no privileges required, no user interaction, and limited availability impact. No known exploits are reported in the wild.

The vulnerability allows local Flatpak applications to delete files on the host system by leveraging symlink following in the trash operation. This impacts availability by potentially removing important files but does not affect confidentiality or integrity. The low CVSS score reflects the limited scope and complexity of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict untrusted Flatpak applications from running or limit their permissions to reduce risk. Monitor vendor communications for updates on patches or official mitigations.