CVE-2026-96275Published
Flatpak: flatpak: arbitrary write access as root via extra-data extraction
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-96275 · Microsoft / collected KEV context
cve-program · CVE-2026-96275
- https://access.redhat.com/errata/RHSA-2026:80497
- https://access.redhat.com/errata/RHSA-2026:80498
- https://access.redhat.com/errata/RHSA-2026:80687
- https://access.redhat.com/errata/RHSA-2026:89733
- https://access.redhat.com/security/cve/CVE-2026-96275
- https://bugzilla.redhat.com/show_bug.cgi?id=2539416
- https://github.com/flatpak/flatpak/security/advisories/GHSA-fqx6-vh4p-42cg
Related operational evidence
Explicit CVE identifiers- Flatpak: flatpak: arbitrary write access as root via extra-data extraction · Affected-version evidence changed · 26 Oct 2026