Mageia 9 Flatpak Critical Sandbox Escape Vulnerability File Deletion Risk
mageia
May 14, 2026
MGASA-2026-0133 - Updated flatpak packages fix security vulnerabilities
Summary
Description:
Complete sandbox escape leading to host file access and code execution
in the host context. (CVE-2026-34078)
Arbitrary file deletion on the host filesystem. (CVE-2026-34079)
References
- https://bugs.mageia.org/show_bug.cgi?id=35336
- https://www.openwall.com/lists/oss-security/2026/04/09/3
- https://github.com/flatpak/flatpak/security/advisories/GHSA-cc2q-qc34-jprg
- https://github.com/flatpak/flatpak/security/advisories/GHSA-p29x-r292-46pp
- https://github.com/flatpak/flatpak/security/advisories/GHSA-2fxp-43j9-pwvc
- https://github.com/flatpak/flatpak/security/advisories/GHSA-89xm-3m96-w3jg
- https://lists.debian.org/debian-security-announce/2026/msg00133.html
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34078
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34079
Topics Covered
Resolution
SRPMS
- 9/core/flatpak-1.14.10-1.1.mga9
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Publication date: 14 May 2026
URL: https://advisories.mageia.org/MGASA-2026-0133.html
Type: security
CVE: CVE-2026-34078,
CVE-2026-34079
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!