CyberRota Analysis
AI-GeneratedA vulnerability exists in the flatpak-system-helper context that allows a malicious user to gain read access to files when a system OCI repository is configured. This occurs because the OCI code paths improperly follow symlinks during the import of user-controlled OCI images. Organizations using flatpak with OCI repositories should prioritize addressing this issue to mitigate potential unauthorized access to sensitive files.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A malicious user can get read-access to files in the flatpak-system-helper context if a system OCI repository is configured, because the OCI code paths in the system helper follow symlinks when importing OCI images that are under the user's control.