Flatpak EUVD-2026-88627

Requires a malicious or compromised Flatpak application to be installed and executed on the target system - this is the core prerequisite, so exploitation is local and gated on the victim running attacker-controlled sandboxed code. The abuse is that a sandboxed app sends signals to a process group encompassing a parent process outside the app's sandbox; affected versions are Flatpak prior to 1.18.4. Limiting factors: the attacker must get their app onto the machine and run it (no remote/unauthenticated path), impact is confined to denial of service (terminating the desktop environment/session) with no confidentiality or integrity effect, and the flaw is fixed by upgrading to 1.18.4.

No CVSS vector, EPSS, KEV, or SSVC data is provided for this CVE, so risk is assessed from the advisory text alone. This is one of six flaws fixed in Flatpak 1.18.4; CVE-2026-97029 specifically lets a malicious/compromised Flatpak app send signals to a process group that includes a parent process outside the sandbox, killing the desktop environment. The realistic impact is availability-only denial of service - no code execution, data theft, or privilege escalation is described. Exploitation requires the attacker's app to already be installed and running on the victim's machine (local, app-execution prerequisite), which meaningfully limits reach: this is not a remote or wormable issue. Exploitation status is 'no public exploit identified at time of analysis' - no POC or KEV entry is referenced. Net: a genuine sandbox-escape-adjacent DoS worth patching on multi-user or untrusted-app Linux desktops, but low urgency relative to the RCE/file-overwrite siblings (CVE-2026-97023/97024) fixed in the same release. Absence of CVSS/EPSS/KEV means these are qualitative judgments, not vendor-confirmed severity.

A user installs a malicious or trojanized Flatpak application. When run, the app sends a signal (e.g. SIGKILL) to a process group that includes its own parent - a process living outside the sandbox - killing the desktop environment or session and forcing the user out, with potential loss of unsaved work. No public exploit code is referenced.