A vulnerability in Flatpak before version 1.10.2-16.oe2403sp4 allows a local attacker to exploit symlink traversal in the revokefs writer used by the flatpak-system-helper. This flaw enables modification of files belonging to other revokefs sessions after validation, including tampering with ostree commit objects in the system repository. Successful exploitation can lead to local root privilege escalation.