CVE-2026-96284
LOW
NVD
CVSS Score
2.5
Severity
LOW
Published
Sep 27, 2026
Vendor
unknown
Description
A malicious user can get read-access to files in the flatpak-system-helper context if a system OCI repository is configured, because the OCI code paths in the system helper follow symlinks when importing OCI images that are under the user's control.