Creation of Temporary File With Insecure Permissions in Flatpak - CVE-2026-97025
Published: September 28, 2026
Vulnerability identifier: #VU152566
CSH Severity: Low
CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-97025
CWE-ID: CWE-378
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to disclose OCI authentication tokens.
The vulnerability exists due to insecure file permissions in the OCI token cache path when downloading apps or runtimes from an authenticated OCI repository. A local user can read the token file to disclose OCI authentication tokens.
The issue is relevant to apps, runtimes, or extensions downloaded from OCI repositories.
Affected software
Flatpak
How to mitigate CVE-2026-97025
Install security update from vendor's website.
Flatpak - update to 1.18.4