CVE-2026-96283: CVE-2026-96283: eksik yetkilendirme

Açıklama (NVD)

By calling org.freedesktop.Flatpak.SystemHelper.CancelPull on another user's pull, the pull is not actually cancelled but removed from internal tracking, making it impossible for the owning user to stop it. Ongoing pulls cannot be stopped.

Özet bilgiler

CVSS v3.1

3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE

CWE-862

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• access.redhat.com
• bugzilla.redhat.com
• github.com
• CWE-862