{
  "cveId": "CVE-2026-96283",
  "url": "https://patchblox.com/security/cve/CVE-2026-96283",
  "summary": "CVE-2026-96283 is fixed in flatpak on 1 platform, first by DEBIAN-CVE-2026-96283, released September 23, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "flatpak: By calling org.freedesktop.Flatpak.SystemHelper.CancelPull on another user\u0027s pull, the pull is not actually cancelled...",
  "description": "By calling org.freedesktop.Flatpak.SystemHelper.CancelPull on another user\u0027s pull, the pull is not actually cancelled but removed from internal tracking, making it impossible for the owning user to stop it. Ongoing pulls cannot be stopped.",
  "published": "2026-09-27T22:17:06Z",
  "severity": "low",
  "cvss": 3.3,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
  "epss": 0.00106,
  "epssPercentile": 0.01124,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "flatpak",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "1.14.10-1~deb12u2",
      "fix": "DEBIAN-CVE-2026-96283",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-96283",
      "released": "2026-09-23T19:19:02Z"
    },
    {
      "platform": "linux",
      "product": "flatpak",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "1.16.4-1",
      "fix": "DEBIAN-CVE-2026-96283",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-96283",
      "released": "2026-09-23T19:19:02Z"
    },
    {
      "platform": "linux",
      "product": "flatpak",
      "release": "Debian 14",
      "fixedVersion": "1.16.4-1",
      "fix": "DEBIAN-CVE-2026-96283",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-96283",
      "released": "2026-09-23T19:19:02Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}