Vulnerability Description
XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileChooser.SaveFiles method to gain arbitrary file access to non-existing files on the host (limited to files the user has access to). The FileChooser.SaveFiles method takes optional filenames which get appended to the selected directory by backends. The backends are supposed to check that the file does not exist yet. The filenames are not validated by the frontend and also not by common backends. This issue has been patched in version 1.22.1.
Related Weaknesses (CWE)
References
- https://github.com/flatpak/xdg-desktop-portal/releases/tag/1.22.1
- https://github.com/flatpak/xdg-desktop-portal/security/advisories/GHSA-cm83-2936
FAQ
What is CVE-2026-55888?
CVE-2026-55888 is a documented vulnerability. XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileChooser.SaveFiles method to gain arbitrary file access to non-existing fil...
How severe is CVE-2026-55888?
CVSS scoring is not yet available for CVE-2026-55888. Check NVD for updates.
Is there a patch for CVE-2026-55888?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.