{"id":"CVE-2026-96284","aliases":[],"cve":{"records":[{"id":"CVE-2026-96284","source":"redhat","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-22T20:44:18.585Z","published":"2026-09-27T22:04:48.577Z","modified":"2026-11-06T20:01:20.516Z"}],"publishers":[{"name":"redhat","role":"CNA","organizationId":"53f830b8-0a3f-465b-8143-3b8a9948e749","modified":"2026-11-06T20:01:20.516Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-09-29T16:04:16.916Z"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-96284","tags":["vdb-entry","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2539423","tags":["issue-tracking","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://github.com/flatpak/flatpak/security/advisories/GHSA-2fxp-43j9-pwvc","tags":[],"source":"redhat"}],"weaknesses":[{"id":"CWE-59","description":"Improper Link Resolution Before File Access","source":"redhat"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-09-29T16:04:07.062227Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Flatpak: flatpak: arbitrary read-access to files in the system-helper context via oci symlink following","titleSource":"redhat","descriptionSource":"redhat","description":"A malicious user can get read-access to files in the flatpak-system-helper context if a system OCI repository is configured, because the OCI code paths in the system helper follow symlinks when importing OCI images that are under the user's control.","score":2.5,"severity":"low","published":"2026-09-27T22:04:48.577Z","modified":"2026-11-06T20:01:20.516Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 10","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:10"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-96284"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 7","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/o:redhat:rhel_els:7"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-96284"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 8","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:8"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-96284"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 9","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-96284"}],"remediation":[{"text":"Remove all OCI system remotes.","source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-96284"}],"references":["https://access.redhat.com/security/cve/CVE-2026-96284","https://bugzilla.redhat.com/show_bug.cgi?id=2539423","https://github.com/flatpak/flatpak/security/advisories/GHSA-2fxp-43j9-pwvc"],"sources":[{"name":"CVE","id":"CVE-2026-96284","modified":"2026-11-06T20:01:20.516Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-96284"}],"assessments":[{"source":"redhat","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","score":2.5}],"sourceAffected":[],"observedAt":"2026-11-06T22:20:07.771Z","kev":{"status":"not-listed","checkedAt":"2026-11-14T22:40:32.870Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-07T00:25:33.375Z","attemptedAt":"2026-11-07T00:25:33.375Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-11-07T00:25:33.979Z","attemptedAt":"2026-11-07T00:25:33.979Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-07T00:25:33.212Z","attemptedAt":"2026-11-07T00:25:33.212Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-07T00:25:34.050Z","attemptedAt":"2026-11-07T00:25:34.050Z"}],"evidence":[{"source":"ENISA EUVD","id":"EUVD-2026-88046","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-88046","modified":"Nov 6, 2026, 8:01:20 PM","score":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","checkedAt":"2026-11-07T00:25:33.212Z"},{"source":"NVD","id":"CVE-2026-96284","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96284","modified":"2026-11-06T20:17:30.930","score":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","checkedAt":"2026-11-07T00:25:33.375Z"},{"source":"FIRST EPSS","id":"CVE-2026-96284","url":"https://www.first.org/epss/","probability":0.0012,"percentile":0.01827,"date":"2026-11-06","checkedAt":"2026-11-07T00:25:34.050Z"}],"aiSummary":{"text":"A malicious user can get read-access to files in the flatpak-system-helper context if a system OCI repository is configured. The vulnerability is due to the OCI code paths in the system helper following symlinks when importing OCI images under the user's control. This affects Red Hat Enterprise Linux 7, 8, 9, and 10.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-06T22:26:34.394Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-96284"}]}}