CVE-2026-96284: CVE-2026-96284: güvenlik açığı

Açıklama (NVD)

A malicious user can get read-access to files in the flatpak-system-helper context if a system OCI repository is configured, because the OCI code paths in the system helper follow symlinks when importing OCI images that are under the user's control.

Özet bilgiler

CVSS v3.1

2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE

CWE-59

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• access.redhat.com
• bugzilla.redhat.com
• github.com
• CWE-59