Threats Tagged 'oesa-2026-4098'

A vulnerability in Flatpak before version 1.18.1 allows a malicious sandboxed application to gain arbitrary read and write access to host files. This occurs due to missing symlink protection in app data directories created within the sandbox, which can be exploited to redirect directory mounts to arbitrary host locations. This flaw can potentially lead to arbitrary code execution on the host system.