CVE-2026-40354
LowCVSS 2.9Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app to trash any file in the host context via a symlink attack on g_file_trash. The vulnerability is fixed in 1.20.4 and 1.21.1.
Risk Assessment
A malicious Flatpak app can delete arbitrary user files in the host context, potentially leading to data loss or system disruption.
Recommendation
Update xdg-desktop-portal to version 1.20.4 or 1.21.1 (or later). Avoid running untrusted Flatpak apps until the update is applied.
Other vulnerabilities in xdg-desktop-portal
See all- CVE-2026-55889High
In XDG Desktop Portal before version 1.22.1, malicious sandboxed applications can use FileTransfer.RetrieveFiles to redirect drag-and-drop and copy-paste data intended for other applications to themselves. Access tokens were generated with g_random_int or g_uuid_string_random based on Mersenne Twister, allowing recovery of PRNG state and prediction of subsequent tokens.
- CVE-2026-55888High
In XDG Desktop Portal before version 1.22.1, malicious sandboxed applications can use FileChooser.SaveFiles to gain arbitrary file access to non-existing files on the host (limited to files the user has access to). Filenames are not validated by the frontend or common backends, which are supposed to check that the file does not already exist.
Original NVD description (English source)
Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app to trash any file in the host context via a symlink attack on g_file_trash.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS