2 matches found
CVE-2026-96283: Missing Authorization
By calling org.freedesktop.Flatpak.SystemHelper.CancelPull on another user's pull, the pull is not actually cancelled but removed from internal tracking, making it impossible for the owning user to stop it. Ongoing pulls cannot be stopped...
3.3CVSS5.9AI score0.00149EPSS
SaveExploits0References2
SUSE CVE-2026-96283
By calling org.freedesktop.Flatpak.SystemHelper.CancelPull on another user's pull, the pull is not actually cancelled but removed from internal tracking, making it impossible for the owning user to stop it. Ongoing pulls cannot be stopped...
3.3CVSS5.9AI score0.00149EPSS
SaveExploits0References3
20