CVE-2026-96283: Missing Authorization in Red Hat Red Hat Enterprise Linux 10
By calling org.freedesktop.Flatpak.SystemHelper.CancelPull on another user's pull, the pull is not actually cancelled but removed from internal tracking, making it impossible for the owning user to stop it. Ongoing pulls cannot be stopped.
AI Analysis
Technical Summary
The vulnerability arises when a local authenticated user invokes org.freedesktop.Flatpak.SystemHelper.CancelPull on a pull operation owned by another user. Instead of cancelling the pull, the system-helper removes it from internal tracking, making it impossible for the owner to stop the ongoing pull. The issue affects only the bookkeeping of the Flatpak subsystem and does not disclose or alter data. Exploitation requires local access with low privileges and no user interaction. The impact is limited to availability of one specific pull operation and does not affect the broader system or service.
Potential Impact
The vulnerability causes a denial of service limited to the Flatpak subsystem by orphaning an ongoing pull operation, which cannot subsequently be cancelled by its owner. There is no impact on confidentiality or integrity. The effect is localized and does not affect the entire system or other services.
Mitigation Recommendations
Red Hat's advisory does not specify any mitigation other than updating. Users should apply available updates once released to address this issue. Until then, no known workaround exists.
CVE-2026-96283: Missing Authorization in Red Hat Red Hat Enterprise Linux 10
Description
By calling org.freedesktop.Flatpak.SystemHelper.CancelPull on another user's pull, the pull is not actually cancelled but removed from internal tracking, making it impossible for the owning user to stop it. Ongoing pulls cannot be stopped.
CVSS v3.1
Score 3.3low
Affected software
Red Hat
Red Hat Enterprise Linux 10
Red Hat
Red Hat Enterprise Linux 7
Red Hat
Red Hat Enterprise Linux 8
Red Hat
Red Hat Enterprise Linux 9
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability arises when a local authenticated user invokes org.freedesktop.Flatpak.SystemHelper.CancelPull on a pull operation owned by another user. Instead of cancelling the pull, the system-helper removes it from internal tracking, making it impossible for the owner to stop the ongoing pull. The issue affects only the bookkeeping of the Flatpak subsystem and does not disclose or alter data. Exploitation requires local access with low privileges and no user interaction. The impact is limited to availability of one specific pull operation and does not affect the broader system or service.
Potential Impact
The vulnerability causes a denial of service limited to the Flatpak subsystem by orphaning an ongoing pull operation, which cannot subsequently be cancelled by its owner. There is no impact on confidentiality or integrity. The effect is localized and does not affect the entire system or other services.
Mitigation Recommendations
Red Hat's advisory does not specify any mitigation other than updating. Users should apply available updates once released to address this issue. Until then, no known workaround exists.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- redhat
- Date Reserved
- 2026-09-22T20:44:08.159Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2026-96283","vendor":"Red Hat"}]
Threat ID: 6ab992a3f7a7c5410688c3e8
Added to database: 09/27/2026, 22:03:15 UTC
Last enriched: 09/27/2026, 22:17:42 UTC
Last updated: 09/28/2026, 02:31:06 UTC
Views: 11
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.