CVE-2023-28100

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4 contain a vulnerability similar to CVE-2017-5226, but using the `TIOCLINUX` ioctl command instead of `TIOCSTI`. If a Flatpak app is run on a Linux virtual console such as `/dev/tty1`, it can copy text from the virtual console and paste it into the command buffer, from which the command might be run after the Flatpak app has exited. Ordinary graphical terminal emulators like xterm, gnome-terminal and Konsole are unaffected. This vulnerability is specific to the Linux virtual consoles `/dev/tty1`, `/dev/tty2` and so on. A patch is available in versions 1.10.8, 1.12.8, 1.14.4, and 1.15.4. As a workaround, don't run Flatpak on a Linux virtual console. Flatpak is primarily designed to be used in a Wayland or X11 graphical environment.

• CWE-20

• https://github.com/flatpak/flatpak/commit/8e63de9a7d3124f91140fc74f8ca9ed73ed53be9Patch
• https://github.com/flatpak/flatpak/security/advisories/GHSA-7qpw-3vjv-xrqpPatch, Vendor Advisory
• https://marc.info/?l=oss-security&m=167879021709955&w=2Mailing List
• https://security.gentoo.org/glsa/202312-12
• https://github.com/flatpak/flatpak/commit/8e63de9a7d3124f91140fc74f8ca9ed73ed53be9Patch
• https://github.com/flatpak/flatpak/security/advisories/GHSA-7qpw-3vjv-xrqpPatch, Vendor Advisory
• https://marc.info/?l=oss-security&m=167879021709955&w=2Mailing List
• https://security.gentoo.org/glsa/202312-12

Published

Mar 16, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-28094Pega platform clients who are using versions 7.4 through 8.8…9.8
• CVE-2023-28095OpenSIPS is a Session Initiation Protocol (SIP) server imple…7.5
• CVE-2023-28096OpenSIPS, a Session Initiation Protocol (SIP) server impleme…7.5
• CVE-2023-28097OpenSIPS is a Session Initiation Protocol (SIP) server imple…7.5
• CVE-2023-28098OpenSIPS is a Session Initiation Protocol (SIP) server imple…7.5
• CVE-2023-28099OpenSIPS is a Session Initiation Protocol (SIP) server imple…7.5
• CVE-2023-28101Flatpak is a system for building, distributing, and running …4.3
• CVE-2023-28102discordrb is an implementation of the Discord API using Ruby…9.6
• CVE-2023-28103matrix-react-sdk is a Matrix chat protocol SDK for React Jav…8.2
• CVE-2023-28104`silverstripe/graphql` serves Silverstripe data as GraphQL r…7.5
• CVE-2023-28105go-used-util has commonly used utility functions for Go. Ver…8.8
• CVE-2023-28106Pimcore is an open source data and experience management pla…4.8