Flatpak Xdg-desktop-portal vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Flatpak Xdg-desktop-portal: 1 record(s), with affected versions and fixes.
cpe:2.3:a:flatpak:xdg-desktop-portal

CVE-2026-40354 Medium · 6.3 CWE-61 Apr 10, 2026

Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app…

Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app to trash any file in the host context via a symlink attack on g_file_trash.