Vulnerabilities (CVE)

Filtered by vendor Flatpak Subscribe
Filtered by product Xdg-desktop-portal
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-40354 1 Flatpak 1 Xdg-desktop-portal 2026-06-17 N/A 2.9 LOW
Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app to trash any file in the host context via a symlink attack on g_file_trash.