Flatpak Xdg Desktop Portal vulnerabilities

1 vulnerability

Known vulnerabilities in Flatpak Xdg Desktop Portal, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.3CVE-2026-40354debianxdg-desktop-portal+3
EPSS score
0.16%
Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app to trash any file in the host context via a symlink attack on g_file_trash.