{"id":167905,"date":"2026-04-08T11:11:59","date_gmt":"2026-04-08T09:11:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-vo-flatpak-pozvolyayushhaya-vypolnit-kod-vne-izolirovannogo-okruzheniya"},"modified":"2026-04-08T11:11:59","modified_gmt":"2026-04-08T09:11:59","slug":"uyazvimost-vo-flatpak-pozvolyayushhaya-vypolnit-kod-vne-izolirovannogo-okruzheniya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/news\/uyazvimost-vo-flatpak-pozvolyayushhaya-vypolnit-kod-vne-izolirovannogo-okruzheniya","title":{"rendered":"Ranjivost u Flatpaku koja omogu\u0107ava izvr\u0161avanje koda izvan izoliranog okru\u017eenja","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

U objavljenom ispravnom izdanju samoodr\u017eivih paketa Flatpak 1.16.4, kao i u eksperimentalnom izdanju 1.17.4, ispravljena je ranjivost (CVE-2026-34078), koja omogu\u0107ava zlo\u0107udnoj ili kompromitiranoj aplikaciji u formatu flatpak da zaobi\u0111e postavljeni re\u017eim sandbox izolacije, dobije pristup datotekama u glavnom sustavu i izvr\u0161i proizvoljan kod izvan re\u017eima izolacije. Problemu je dodijeljena kriti\u010dna razina opasnosti (9.3 od 10). <\/p>\n

Ran vulnerability exists in the D-Bus service flatpak-portal, which facilitates the launch of 'portals' used for accessing the main environment resources from isolated applications. The issue arises because the flatpak-portal service allows applications to specify file paths in the sandbox-expose option that, due to insufficient checks, can be symbolic links pointing to arbitrary parts of the filesystem. <\/p>\n

Before mounting, the service reveals the symbolic link and mounts the path it points to in the sandbox environment, which allows bypassing isolation and gaining read and write access to files in the host environment. To enable code execution in the system, for example, you can add an auto-start script such as '~\/.bashrc' or '~\/.profile', or modify the file '~\/.ssh\/authorized_keys' with SSH keys. <\/p>\n

The status of vulnerability mitigation in distributions can be evaluated on these pages (if the page is inaccessible, it means the distribution developers have not yet started addressing the issue): Debian, Ubuntu, SUSE, RHEL, Gentoo, Arch, Fedora. As a workaround for protection, you can disable the flatpak-portal service: sudo systemctl --global mask flatpak-portal.service && systemctl --user stop flatpak-portal.service <\/p>\n

Osim kriti\u010dne ranjivosti, u novom izdanju ispravljena su jo\u0161 tri sigurnosna problema: <\/p>\n