CVE-2026-96284

A malicious user can get read-access to files in the flatpak-system-helper context if a system OCI repository is configured, because the OCI code paths in the system helper follow symlinks when importing OCI images that are under the user's control.

Red Hat estimates the CVSSv3.1 vector of CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N.

Exploitation requires the attacker to be a local, authenticated user able to trigger a system-wide OCI image import via the flatpak-system-helper D-Bus service (AV:L, PR:L). This depends on the uncommon, non-default environmental precondition that a system OCI repository is configured (AC:H). No interaction from another party is required (UI:N). The OCI code paths in the system helper follow symlinks when importing OCI images under the attacker's control, and because this import runs in the privileged system-helper context, host file content can be surfaced through the attacker's own crafted import.

The vulnerable and impacted components remain within the same overall flatpak client/helper security authority (S:U). While some host file content can leak via this symlink-following behavior, disclosure surfaces only through the attacker's own crafted import under the rarer system-OCI-repository precondition, rather than through a broadly repeatable read of arbitrary files (C:L). There is no integrity or availability impact (I:N/A:N).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Remove all OCI system remotes.