CVE-2026-96807

A flaw was found in Flatpak. A malicious sandboxed application can manipulate a symlink, causing the `regenerate_ld_cache` function to write files to an unintended location. While the attacker cannot control the content or filenames, this vulnerability could lead to a low impact on system integrity or availability.

Last checked: 2026-09-27 00:12 UTC

• No exploitation evidence · CISA Coordinator (Assessed 2026-09-26 22:45 UTC)

References

• NVD: CVE-2026-96807
• Upstream Advisory

Fix Status by Distribution

Fix evidence last checked: 2026-10-10 09:15 UTC