CyberRota Analysis
AI-GeneratedA path traversal vulnerability in Flatpak allows a malicious app to delete arbitrary files outside its deployment directory during installation or upgrades, potentially affecting system integrity. This issue is particularly critical in system-wide installations, where deletions occur with root privileges. Organizations using Flatpak for application deployment should prioritize patching this vulnerability to mitigate the risk of unauthorized file deletion.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause deletion of attacker-chosen files outside the deployment directory when the app is installed or upgraded. In system-wide installations, the deletion is performed as root.