CVE-2026-107466

A flaw in flatpak-builder allows for information disclosure by bypassing directory confinement checks. An attacker can craft a build manifest containing local file Uniform Resource Identifiers (URIs) within source download definitions. When a user or a continuous integration (CI) system processes...

CVE-2026-107466 Flatpak-builder: local file exfiltration via `file

A flaw was found in flatpak-builder. This vulnerability allows an attacker to cause information disclosure by convincing a user or continuous integration CI system to process a crafted build manifest. By specifying local file Uniform Resource Identifiers URIs within source download definitions, t...

PT-2026-107864

A flaw was found in flatpak-builder. This vulnerability allows an attacker to cause information disclosure by convincing a user or continuous integration CI system to process a crafted build manifest. By specifying local file Uniform Resource Identifiers URIs within source download definitions, t...