{"id":"CVE-2026-96282","aliases":[],"cve":{"records":[{"id":"CVE-2026-96282","source":"redhat","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-22T20:43:56.596Z","published":"2026-09-27T21:53:43.645Z","modified":"2026-11-06T20:01:17.649Z"}],"publishers":[{"name":"redhat","role":"CNA","organizationId":"53f830b8-0a3f-465b-8143-3b8a9948e749","modified":"2026-11-06T20:01:17.649Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-09-28T12:58:34.403Z"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-96282","tags":["vdb-entry","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2539422","tags":["issue-tracking","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://github.com/flatpak/flatpak/security/advisories/GHSA-w69g-9x8j-7p8f","tags":[],"source":"redhat"}],"weaknesses":[{"id":"CWE-59","description":"Improper Link Resolution Before File Access","source":"redhat"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-09-28T12:58:23.772794Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Flatpak: flatpak: extension metadata path traversal file existence oracle","titleSource":"redhat","descriptionSource":"redhat","description":"A malicious Flatpak extension can probe the host filesystem to determine what files and directories exist at arbitrary paths, and host directory listings can be disclosed to sandboxed applications using the extension. Additionally, unvalidated extension metadata can cause extension content to be mounted at unintended locations inside the sandbox.","score":3.1,"severity":"low","published":"2026-09-27T21:53:43.645Z","modified":"2026-11-06T20:01:17.649Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 10","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:10"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-96282"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 7","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/o:redhat:rhel_els:7"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-96282"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 8","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:8"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-96282"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 9","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-96282"}],"remediation":[{"text":"Avoid installing Flatpak extensions from non-trusted sources.","source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-96282"}],"references":["https://access.redhat.com/security/cve/CVE-2026-96282","https://bugzilla.redhat.com/show_bug.cgi?id=2539422","https://github.com/flatpak/flatpak/security/advisories/GHSA-w69g-9x8j-7p8f"],"sources":[{"name":"CVE","id":"CVE-2026-96282","modified":"2026-11-06T20:01:17.649Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-96282"}],"assessments":[{"source":"redhat","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","score":3.1}],"sourceAffected":[],"observedAt":"2026-11-06T22:20:04.384Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T00:00:32.242Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-07T00:30:31.908Z","attemptedAt":"2026-11-07T00:30:31.908Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-11-07T00:30:31.902Z","attemptedAt":"2026-11-07T00:30:31.902Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-07T00:30:31.300Z","attemptedAt":"2026-11-07T00:30:31.300Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-07T00:30:31.902Z","attemptedAt":"2026-11-07T00:30:31.902Z"}],"evidence":[{"source":"ENISA EUVD","id":"EUVD-2026-88044","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-88044","modified":"Nov 6, 2026, 8:01:17 PM","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","checkedAt":"2026-11-07T00:30:31.300Z"},{"source":"FIRST EPSS","id":"CVE-2026-96282","url":"https://www.first.org/epss/","probability":0.00239,"percentile":0.15057,"date":"2026-11-06","checkedAt":"2026-11-07T00:30:31.902Z"},{"source":"NVD","id":"CVE-2026-96282","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96282","modified":"2026-11-06T20:17:30.590","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","checkedAt":"2026-11-07T00:30:31.908Z"}],"aiSummary":{"text":"A malicious Flatpak extension can probe the host filesystem, potentially disclosing directory listings to sandboxed applications. The vulnerability affects Red Hat Enterprise Linux 7, 8, 9, and 10. Local access is required to exploit the weakness.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-06T22:26:37.240Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-96282"}]}}