Is CVE-2026-96283 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-96283?

CVE-2026-96283 has a CVSS v3 severity of LOW (3.3).

Back

CVE-2026-96283

Description

By calling org.freedesktop.Flatpak.SystemHelper.CancelPull on another user's pull, the pull is not actually cancelled but removed from internal tracking, making it impossible for the owning user to stop it. Ongoing pulls cannot be stopped.