F
Flatpak
Security Risk Profile
29
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 68 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 21, 2017 to present
68
Total CVEs
28
Critical+High
0
Exploited
14
Unpatched
Threat Assessment
Avg CVSS
6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
14
Critical/High
Risk Level
29/100
low
🆕 1Fresh (<7d)📈 36 in Last 30 Days
Severity Distribution
Critical
5High
23Medium
13Low
13Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
19Age Distribution
Common Weaknesses (CWE)
1
Path Traversal
11
2
Input Validation
4
3
Buffer Overflow
2
4
Race Condition
2
Most Affected Products
1. Flatpak Flatpak80
2. Debian Debian Linux13
3. debian/flatpak11
4. redhat/flatpak9
5. Fedoraproject Fedora8
Recent Vulnerabilities
See more →CVE-2026-92162
CVSS 7.2high
Flatpak vulnerable to path traversal via unvalidated "arch" parameter in DeployAppstream
Oct 20, 2026🔧 No Patch
CVE-2026-97029
CVSS 5.7EPSS 0%medium
Flatpak: flatpak: sandboxed app can signal unsandboxed processes in the same process group
Sep 28, 2026🔧 No Patch
REDHAT-BUG-2542698
CVSS 4.0medium
Sep 28, 2026🔧 No Patch
CVE-2026-97027
CVSS 3.6EPSS 0%low
Flatpak: flatpak: denial of service via unsanitized keys in exported desktop entry / d-bus service files
Sep 28, 2026🔧 No Patch
REDHAT-BUG-2542683
CVSS 1.0low
Sep 28, 2026🔧 No Patch
CVE-2026-97026
CVSS 3.9EPSS 0%low
Flatpak: flatpak: world-writable temporary child repositories in system-helper cache path
Sep 28, 2026🔧 No Patch
REDHAT-BUG-2542637
CVSS 1.0low
Sep 28, 2026🔧 No Patch
CVE-2026-97025
CVSS 3.2EPSS 0%low
Flatpak: flatpak: world-readable oci authentication token in system-helper cache path
Sep 28, 2026🔧 No Patch
REDHAT-BUG-2542628
CVSS 1.0low
Sep 28, 2026🔧 No Patch
REDHAT-BUG-2542625
CVSS 7.0high
Sep 28, 2026🔧 No Patch
Monitor Flatpak in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.