CyberRota Analysis
AI-GeneratedThe vulnerability allows users to call the `org.freedesktop.Flatpak.SystemHelper.CancelPull` method on another user's pull request, which removes the pull from internal tracking without actually cancelling it. As a result, the original user cannot stop ongoing pulls, potentially leading to resource misuse or unintended application behavior. Users and administrators of Flatpak environments should prioritize addressing this issue to maintain control over application management.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
By calling org.freedesktop.Flatpak.SystemHelper.CancelPull on another user's pull, the pull is not actually cancelled but removed from internal tracking, making it impossible for the owning user to stop it. Ongoing pulls cannot be stopped.