Critical Flatpak Vulnerabilities Enable Sandbox Escape on Linux Systems

Flatpak has disclosed several vulnerabilities, including a critical one allowing sandbox escape with full host access. This vulnerability enables a malicious app to gain arbitrary read and write access to host files, potentially escalating to arbitrary code execution. The flaw stems from inadequate symlink protection, allowing attackers to replace private directories with symlinks pointing to sensitive areas of the host system. The Flatpak 1.18.1 release addresses this and nine other severe vulnerabilities, with all older versions believed to be affected. Major Linux distributions, such as Fedora, have yet to push the latest version to stable releases. CVE IDs have been requested for all vulnerabilities, with two already assigned by Red Hat. The most severe vulnerability disclosed earlier, CVE-2026-34078, received a perfect 10 out of 10 severity score. Users are urged to upgrade to the latest stable release to mitigate risks.

Key Points: • Flatpak vulnerabilities allow sandboxed apps to escape and access host files. • Critical flaw due to missing symlink protection; CVE-2026-34078 has a severity score of 10. • Users are advised to upgrade to Flatpak version 1.18.1 to address these vulnerabilities.