CVE-2026-97025

Flatpak writes the OCI repository authentication token with world-readable permissions (0644) in the system-helper's cache directory, allowing other local users on a multi-user system to read the token and impersonate the authenticated user against the OCI repository. Only OCI-based sources (e.g. as used by Fedora) are affected; libostree-based sources such as Flathub are not.

Red Hat estimates the CVSSv3.1 vector of CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N from provided CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N. This attack requires user interaction and breaches confidentiality outside of its original scope.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Use libostree repositories such as Flathub, or unauthenticated (public) OCI repositories.