Vulnerability feed

Executive summary

Red Hat published advisory RHSA-2026:89733 for the flatpak package, which is used to build, distribute, and run sandboxed desktop applications on Red Hat Enterprise Linux 9.6 Extended Update Support and related subscriptions. Red Hat rates the update Important and lists four security flaws that can lead to code execution or privilege escalation. Red Hat recommends applying the flatpak update described in the advisory.

Technical summary

The advisory lists four flaws in flatpak: missing symlink protection leading to arbitrary code execution (CVE-2026-90616), extra-data extraction giving arbitrary write access as root (CVE-2026-96275), a buffer overflow in OCI delta stream path names on 32-bit systems (CVE-2026-96280), and local privilege escalation via symlink traversal in the revokefs writer (CVE-2026-96808). The fixed package version is flatpak-1.12.9-4.el9_6.5, as written in the advisory. The advisory does not state CVSS scores in the text provided, attack preconditions beyond the descriptions above, workarounds, or exploitation in the wild, and it refers readers to the CVE pages and to https://access.redhat.com/articles/11258 for update instructions.

Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source.

Summarized from access.redhat.com/errata/RHSA-2026:89733

Impact if exploited

How it is exploited

Attack vector

Network

Attack complexity

Low

Privileges required

None

User interaction

Required

Scope

Unchanged

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affects

Red HatflatpakRed Hat Enterprise LinuxflatpakRed Hat Enterprise Linux for x86_64 - Extended Update Support 9.6Red Hat Enterprise Linux Server - AUS 9.6Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.6Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.6Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.6Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.6Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6