CVE-2026-55889 | flatpak xdg-desktop-portal up to 1.22.0 FileTransfer FileTransfer.RetrieveFiles random values (EUVD-2026-108751)

October 23, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in flatpak xdg-desktop-portal up to 1.22.0. The affected element is the function FileTransfer.RetrieveFiles of the component FileTransfer. The manipulation leads to insufficiently random values.

This vulnerability is listed as CVE-2026-55889. The attack must be carried out locally. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More