{"id":"CVE-2026-55888","title":"xdg-desktop-portal: xdg-desktop-portal: Unauthorized host file access via unvalidated FileChooser filenames (CVE-2026-55888)","summary":"A flaw was found in xdg-desktop-portal. An attacker operating a sandboxed application can bypass isolation boundaries to gain unauthorized access to host files. This issue occurs because the FileChooser interface fails to properly validate…","severity":"high","cvss":8.2,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","cvssSource":"vendor","cwe":"CWE-22","vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","affected":["enterprise_linux 10","enterprise_linux 7","enterprise_linux 8","enterprise_linux 9"],"published":"2026-10-23","updated":"2026-10-23","sourceUpdated":"2026-10-23T18:10:31+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-55888.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-55888.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-55888"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2559766"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-55888"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55888"},{"url":"https://github.com/flatpak/xdg-desktop-portal/releases/tag/1.22.1"},{"url":"https://github.com/flatpak/xdg-desktop-portal/security/advisories/GHSA-cm83-2936-gxjm"}],"tags":["csaf","vex","red-hat","cve.org"],"scores":{"vendor":8.2,"cna":8.8},"ingestedAt":"2026-10-23T13:24:55.510Z","slug":"CVE-2026-55888","body":"## Overview\n\nA flaw was found in xdg-desktop-portal. An attacker operating a sandboxed application can bypass isolation boundaries to gain unauthorized access to host files. This issue occurs because the FileChooser interface fails to properly validate filenames before passing them to backend services. Consequently, a malicious application can create and manipulate arbitrary files on the host system, limited only by the permissions of the current user.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Important · affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 · no fix planned: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 · updated 2026-10-23 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-55888.json)\n\n**xdg-desktop-portal: xdg-desktop-portal: Unauthorized host file access via unvalidated FileChooser filenames** — rated Important by Red Hat. Released 2026-10-23.\n\nAffected:\n\n- Red Hat Enterprise Linux 10\n- Red Hat Enterprise Linux 7\n- Red Hat Enterprise Linux 8\n- Red Hat Enterprise Linux 9\n\nNo fix planned:\n\n- Red Hat Enterprise Linux 10\n- Red Hat Enterprise Linux 7\n- Red Hat Enterprise Linux 8\n- Red Hat Enterprise Linux 9\n\n## Remediation\n\nAffected","depth":"twilight","depthScore":45,"depthScoreParts":{"impact":45.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":228672,"id":"CVE-2026-55888","ts":1792844896032,"field":"cvss","old":"8.8","new":"8.2"}]}