CVE-2026-96283

Description

By calling org.freedesktop.Flatpak.SystemHelper.CancelPull on another user's pull, the pull is not actually cancelled but removed from internal tracking, making it impossible for the owning user to stop it. Ongoing pulls cannot be stopped.

Traduire en français

Produits concernés

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9

Scores CVSS

Faiblesses (CWE)

• CWE-862

Références

• https://access.redhat.com/security/cve/CVE-2026-96283
• https://bugzilla.redhat.com/show_bug.cgi?id=2539424
• https://github.com/flatpak/flatpak/security/advisories/GHSA-89xm-3m96-w3jg

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories