CVE-2026-96282
LOW
CVSS 3.1
Published: 2026-09-27
Modified: 2026-09-28
Tenable Plugin
Checking the public Tenable catalog…
Threat Intelligence Pending
IOCs, MITRE ATT&CK techniques, and attack chain data are being generated. Refresh in a few seconds.
Description
A malicious Flatpak extension can probe the host filesystem to determine what files and directories exist at arbitrary paths, and host directory listings can be disclosed to sandboxed applications using the extension. Additionally, unvalidated extension metadata can cause extension content to be mounted at unintended locations inside the sandbox.
Quick Facts
| CVE ID | CVE-2026-96282 |
| CVSS Score | 3.1 |
| Vector | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N |
| Published | 2026-09-27 |
| Exploited | No |
| CISA KEV | No |
| PoC | Not public |