CVE-2026-96279 Red Hat CVE debrief

Who should care

System administrators and security teams responsible for Flatpak installations, especially those running system-wide installs as root, should assess exposure and verify host file permissions

Why it matters

CVE-2026-96279 allows a malicious OCI registry to disclose arbitrary host file contents via hardlinks during Flatpak application installations or updates, posing a risk to system-wide installs running as root.

• Potential disclosure of sensitive host file contents, including /etc/shadow for system-wide installs running as root
• Need to verify host file permissions and restrict access to sensitive files
• Potential for malicious OCI registry interactions to lead to unauthorized file access
• Requires assessment of Flatpak installation exposure and monitoring of application installations and updates

Technical summary

A malicious OCI registry can hardlink arbitrary host files into the extraction directory when a user installs or updates a Flatpak application from an OCI remote, allowing disclosure of arbitrary host file contents. For system-wide installs running as root, this includes sensitive files such as /etc/shadow. The vulnerability is particularly concerning for system-wide installs as it can lead to the disclosure of sensitive files. Defenders should assess exposure and verify host file permissions to mitigate potential risks.

Defensive priority

Assess exposure of Flatpak installations, especially system-wide installs running as root, and verify host file permissions

Recommended defensive actions

• Assess exposure of Flatpak installations, especially system-wide installs running as root
• Verify host file permissions and restrict access to sensitive files
• Monitor Flatpak application installations and updates for suspicious activity
• Consider implementing additional security controls for OCI registry interactions
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

CVE Program and NVD records indicate a malicious OCI registry can disclose arbitrary host file contents via hardlinks during Flatpak application installation or updates. Evidence is limited to CVE Program and NVD records, which suggest that the vulnerability is exploitable and could lead to unauthorized file access. Defenders should verify host file permissions and assess exposure of Flatpak installations, especially those running as root.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.