Two security vulnerabilities in Flatpak allow arbitrary file deletion and arbitrary file write in root context via path traversal in specific deploy directories. These issues affect Flatpak versions prior to 1.12.9-4.el9_8.6 and have been addressed in the fixed version 1.12.9-4.el9_8.6. The vulnerabilities were rated as important by Red Hat and are relevant to multiple Red Hat Enterprise Linux 9 variants and related products.