https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T17:58:53.333537+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-96279 CVE-2026-96279 — Flatpak: flatpak: path traversal issue in oci archive extraction via hardlinks 2026-10-05T17:58:53.349222+00:00

Affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9

A malicious OCI registry can hardlink arbitrary host files into the extraction directory when a user installs or updates a Flatpak application from an OCI remote, allowing disclosure of arbitrary host file contents. For system-wide installs running as root, this includes sensitive files such as /etc/shadow.