{"vulnerability": "CVE-2024-32462", "sightings": [{"uuid": "ea971844-77c1-46a7-a4e1-38e148fd736a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-32462", "type": "seen", "source": "https://t.me/arpsyndicate/4727", "content": "#ExploitObserverAlert\n\nCVE-2024-32462\n\nDESCRIPTION: Exploit Observer has 9 entries in 4 file formats related to CVE-2024-32462. Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. in versions before 1.10.9, 1.12.9, 1.14.6, and 1.15.8, a malicious or compromised Flatpak app could execute arbitrary code outside its sandbox. Normally, the `--command` argument of `flatpak run` expects to be given a command to run in the specified Flatpak app, optionally along with some arguments. However it is possible to instead pass `bwrap` arguments to `--command=`, such as `--bind`. It's possible to pass an arbitrary `commandline` to the portal interface `org.freedesktop.portal.Background.RequestBackground` from within a Flatpak app. When this is converted into a `--command` and arguments, it achieves the same effect of passing arguments directly to `bwrap`, and thus can be used for a sandbox escape. The solution is to pass the `--` argument to `bwrap`, which makes it stop processing options. This has been supported since bubblewrap 0.3.0. All supported versions of Flatpak require at least that version of bubblewrap. xdg-desktop-portal version 1.18.4 will mitigate this vulnerability by only allowing Flatpak apps to create .desktop files for commands that do not start with --. The vulnerability is patched in 1.15.8, 1.10.9, 1.12.9, and 1.14.6.\n\nFIRST-EPSS: 0.000450000\nARPS-PRIORITY: 0.7115119", "creation_timestamp": "2024-04-20T18:32:00.000000Z"}, {"uuid": "35e6eb44-af7e-4095-8b7a-398dbe3a81a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-32462", "type": "seen", "source": "https://t.me/sysadm_in_up/2115", "content": "/ flatpak CVE-2024-32462 : Sandbox escape via RequestBackground \n\nhttps://www.openwall.com/lists/oss-security/2024/04/18/5", "creation_timestamp": "2026-07-30T00:03:03.726174Z"}, {"uuid": "aea5638e-48ce-4af2-aaf9-e5fefed7ed88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-32462", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_up/2115", "content": "/ flatpak CVE-2024-32462 : Sandbox escape via RequestBackground \n\nhttps://www.openwall.com/lists/oss-security/2024/04/18/5", "creation_timestamp": "2026-08-04T01:00:03.342548Z"}, {"uuid": "6c698966-00d5-471c-87f2-15b98160c5b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-32462", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_up/2115", "content": "/ flatpak CVE-2024-32462 : Sandbox escape via RequestBackground \n\nhttps://www.openwall.com/lists/oss-security/2024/04/18/5", "creation_timestamp": "2026-08-05T00:00:59.254246Z"}, {"uuid": "35c702e7-e97e-4185-bbf4-b11f93c6bc6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-32462", "type": "seen", "source": "https://t.me/sysadm_in_up/2115", "content": "/ flatpak CVE-2024-32462 : Sandbox escape via RequestBackground \n\nhttps://www.openwall.com/lists/oss-security/2024/04/18/5", "creation_timestamp": "2026-07-29T12:03:17.982660Z"}]}