Flatpak Arbitrary File Deletion Vulnerability

A vulnerability in Flatpak versions prior to 1.16.4 allows applications to delete arbitrary files on the host system. This issue arises because the ld.so caching mechanism removes outdated cache files without properly verifying that the application-controlled path to these files is within the cache directory. As a result, Flatpak apps can manipulate files outside of their sandboxed environment.

Impact

Exploitation of this vulnerability enables Flatpak applications to delete any file on the host filesystem, potentially leading to data loss or system instability.

Remediation

Users can update to Flatpak version 1.16.4 or wait for the upcoming version 1.18.0, which will also include the patch.