CVE-2026-96807 | Flatpak up to 1.18.0 Sandbox .ld.so regenerate_ld_cache appid symlink

September 23, 2026 Yanac

A vulnerability labeled as problematic has been found in Flatpak up to 1.18.0. Impacted is the function regenerate_ld_cache of the file .ld.so of the component Sandbox. The manipulation of the argument appid results in symlink following.

This vulnerability is reported as CVE-2026-96807. The attack requires a local approach. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More