Search: CVE-2026-97023

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.1	EPSS 0.5%	CVE-2026-97023Red Hat Enterprise Linux 10 · UNIX Symbolic Link (Symlink) Following High7.1EPSS 0.5%2026-09-28CVE Database V5CVE-2026-97023 A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause deletion of attacker-chosen files outside the deployment directory when the app is installed or upgraded. In system-wide installations, the deletion is performed as root. EPSS 0.5%Vulnerability	CVE Database V5	2026-09-28

Page 1 of 1 · 11 duplicate CVE records merged