CVE-2026-96284

The Flatpak utility is vulnerable to a flaw where the OCI code paths in the system-helper context follow symlinks when importing OCI images. A malicious user who controls the OCI image can exploit this to gain arbitrary read-access to files within the flatpak-system-helper context, provided a sys...