What’s Vulnerable › Products

flatpak xdg-desktop-portal vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your flatpak xdg-desktop-portal version is affected

Latest flatpak xdg-desktop-portal vulnerabilities

• CVE-2026-55889 — XDG Desktop Portal: Drag-and-drop and copy-paste theft via predictable FileTransfer key (CVSS 8.3)
• CVE-2026-55888 — XDG Desktop Portal: Arbitrary file access via SaveFiles "files" option path traversal (CVSS 8.8)
• CVE-2026-40354 — (CVSS 6.3)