flatpak security update

1.12.9-4.0.1 - Restore the flatpak-builder 1.0.0 subpackage Orabug: 40105180 - Move flatpak-session-helper back into flatpak Orabug: 40105180 1.12.9-4 - Import to OL7 Orabug: 39695281 1.12.9-4 - Fix arbitrary code execution via crafted symlinks in sandbox-expose options Resolves: RHEL-165633 - Fi...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : attr vulnerability (USN-8691-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8691-1 advisory. It was discovered that attr incorrectly handled symbolic links while traversing directory...

CVE-2026-108839

thClaws through 0.141.0 contains a link-following vulnerability in the postinputs handler of the v1 API POST /v1/inputs endpoint that allows writes outside the workspace by following symlinks. Attackers who plant a symlink under the allowed inputs/ prefix can cause later authenticated uploads to...

CVE-2026-108759

mistral.rs 0.9.0 through 0.9.4 contains a link following vulnerability in mistralrs-code-exec that allows sandboxed shell code to read and overwrite files outside the sandbox via symlinks. Attackers or prompt-injected agents can name symlinks as outputs or reuse sessions with symlinked input path...

CVE-2026-108759

mistral.rs 0.9.0 through 0.9.4 contains a link following vulnerability in mistralrs-code-exec that allows sandboxed shell code to read and overwrite files outside the sandbox via symlinks. Attackers or prompt-injected agents can name symlinks as outputs or reuse sessions with symlinked input path...

CVE-2026-108759 mistral.rs 0.9.0 through 0.9.4 Sandbox Escape via Symlink Following in mistralrs-code-exec

mistral.rs 0.9.0 through 0.9.4 contains a link following vulnerability in mistralrs-code-exec that allows sandboxed shell code to read and overwrite files outside the sandbox via symlinks. Attackers or prompt-injected agents can name symlinks as outputs or reuse sessions with symlinked input path...

EUVD-2026-96924

mistral.rs 0.9.0 through 0.9.4 contains a link following vulnerability in mistralrs-code-exec that allows sandboxed shell code to read and overwrite files outside the sandbox via symlinks. Attackers or prompt-injected agents can name symlinks as outputs or reuse sessions with symlinked input path...

CVE-2026-108759: Improper Link Resolution Before File Access

mistral.rs 0.9.0 through 0.9.4 contains a link following vulnerability in mistralrs-code-exec that allows sandboxed shell code to read and overwrite files outside the sandbox via symlinks. Attackers or prompt-injected agents can name symlinks as outputs or reuse sessions with symlinked input path...

PT-2026-110161

Name of the Vulnerable Software and Affected Versions mistral.rs versions 0.9.0 through 0.9.4 Description A link following issue exists in the mistralrs-code-exec component. This allows sandboxed shell code to read and overwrite files outside the sandbox by using symlinks symbolic links, which ar...

CVE-2026-108599

phi 0.1.1 through 0.28.4 contains an improper link resolution vulnerability that allows malicious repositories to bypass workspaceonlywrites by exploiting lexical-only path checks in the permission gate. Attackers can commit symlinks pointing outside the workspace and use prompt injection to make...

CVE-2026-108600

open-multi-agent @open-multi-agent/core 1.5.0 through 1.21.2 contains a link following vulnerability in the filewrite tool sandbox that allows attackers to create files outside the workspace root by using dangling symlinks. Attackers can plant a dangling symlink in the workspace and steer the age...

CVE-2026-108600

The open-multi-agent (@open-multi-agent/core) package (versions 1.5.0 through 1.21.2 ) is vulnerable to a link following vulnerability (CWE-59) within the file_write tool sandbox . This flaw allows an attacker to escape the workspace root and create files in unauthorized locations by using dangli...

EUVD-2026-96392

open-multi-agent @open-multi-agent/core 1.5.0 through 1.21.2 contains a link following vulnerability in the filewrite tool sandbox that allows attackers to create files outside the workspace root by using dangling symlinks. Attackers can plant a dangling symlink in the workspace and steer the age...

CVE-2026-108599 Phi 0.1.1 through 0.28.4 Symlink Workspace Write Restriction Bypass

phi 0.1.1 through 0.28.4 contains an improper link resolution vulnerability that allows malicious repositories to bypass workspaceonlywrites by exploiting lexical-only path checks in the permission gate. Attackers can commit symlinks pointing outside the workspace and use prompt injection to make...

CVE-2026-108599

The phi software (versions 0.1.1 through 0.28.4 ) is vulnerable to an improper link resolution vulnerability (CWE-59) within its permission gate. The root cause is the use of lexical-only path checks , which allows malicious repositories to bypass workspace_only_writes restrictions. By committing...

EUVD-2026-96393

phi 0.1.1 through 0.28.4 contains an improper link resolution vulnerability that allows malicious repositories to bypass workspaceonlywrites by exploiting lexical-only path checks in the permission gate. Attackers can commit symlinks pointing outside the workspace and use prompt injection to make...

ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the target

ZipStreamReader::extract applies Unix permissions through extracted symlinks without validating the symlink target stays within the destination For further details see: https://github.com/zip-rs/zip2/security/advisories/GHSA-4684-h2q9-2vcp...

PT-2026-109740

Name of the Vulnerable Software and Affected Versions phi versions 0.1.1 through 0.28.4 open-multi-agent affected versions not specified Description An improper link resolution issue allows malicious repositories to bypass the workspace only writes restriction by exploiting lexical-only path chec...

CVE-2026-108600: Improper Link Resolution Before File Access

open-multi-agent @open-multi-agent/core 1.5.0 through 1.21.2 contains a link following vulnerability in the filewrite tool sandbox that allows attackers to create files outside the workspace root by using dangling symlinks. Attackers can plant a dangling symlink in the workspace and steer the age...

CVE-2026-108599: Improper Link Resolution Before File Access

phi 0.1.1 through 0.28.4 contains an improper link resolution vulnerability that allows malicious repositories to bypass workspaceonlywrites by exploiting lexical-only path checks in the permission gate. Attackers can commit symlinks pointing outside the workspace and use prompt injection to make...