Threats Tagged 'cve-2026-34078'

Two security vulnerabilities have been identified in Flatpak, a system for sandboxed desktop applications on Linux. CVE-2026-34078 allows arbitrary code execution via crafted symlinks in sandbox-expose options. CVE-2026-34079 permits arbitrary file deletion on the host due to improper cache file path validation. These issues affect multiple Red Hat Enterprise Linux 8 variants and related products. Red Hat has issued an important security advisory with updates addressing these vulnerabilities. No known exploits are reported in the wild. Users are advised to apply the provided updates to mitigate these risks.

Two security vulnerabilities have been identified in Flatpak, a system for building, distributing, and running sandboxed desktop applications on Linux. CVE-2026-34078 allows arbitrary code execution via crafted symlinks in sandbox-expose options. CVE-2026-34079 permits arbitrary file deletion on the host due to improper cache file path validation. These issues affect Red Hat Enterprise Linux 10 and related products. Red Hat has released security updates addressing these vulnerabilities. The update is rated as Important by Red Hat Product Security. Users should apply the provided updates to remediate these issues.

Two security vulnerabilities have been identified in Flatpak on Red Hat Enterprise Linux 9. The first (CVE-2026-34078) allows arbitrary code execution via crafted symlinks in sandbox-expose options. The second (CVE-2026-34079) permits arbitrary file deletion on the host due to improper cache file path validation. Red Hat has issued an important security advisory and released updated Flatpak packages to address these issues. The vulnerabilities affect multiple architectures and variants of Red Hat Enterprise Linux 9 and CodeReady Linux Builder. No known exploits in the wild have been reported. Users are advised to apply the provided updates to mitigate these risks.