Skip to content
bugbounty.fyi
Get paid to secure open source 475 paid open-source programs on Sorona, up to $1M Perk Low bugs: $100 or 1 mo Claude Max

Also on Patchstack. All 476 paid open-source programs

Try

Highest paying Newly launched Paid without KYC Full safe harbor
All results

About this site

Flatpak bug bounty programs

flatpak.org Updated

Flatpak runs one public program: a Sorona bug bounty paying up to $1,500.

Top reward
$1,500
Sorona
Programs
1
1 pays cash
Targets in scope
13
2 types
Last change
None yet
Tracked since Nov 2026

Where to report

The one public program Flatpak runs.

  • Flatpak

    Sorona · Bug bounty

    Open

    Top reward

    $1,500
    Critical
    –
    High
    –
    Medium
    –
    Low
    $100
    Safe harbor
    Partial

Amounts are the top reward per severity in the currency each program pays. First response is the platform's measured average when it publishes one, else what the policy promises.

What is in scope

13 targets. 5 excluded.

  • https://flatpak.org

    Web

  • Application metadata parsing: the manifest, the .flatpak bundle format and the declared permission set

    Products and areas

  • flatpak-builder and the build-time paths that fetch, unpack and patch sources

    Products and areas

  • Installation, update and uninstall flows for both the system-wide and per-user installations

    Products and areas

  • OSTree repository handling: remote configuration, GPG signature verification, pull and deploy

    Products and areas

  • Report privately to the flatpak-security list at freedesktop.org, a closed maintainer list, against a version in the supported matrix around the 1.18.x stable series. No component of the project below that is carved out

    Products and areas

  • Runtime and extension resolution, including where a runtime's files land inside the sandbox

    Products and areas

  • The D-Bus proxy (xdg-dbus-proxy) and its filtering of bus traffic in both directions

    Products and areas

  • The permission store and the way a granted permission is recorded, checked and revoked

    Products and areas

  • The portal layer in full: the document portal, file chooser, screenshot, camera, location, background and every other portal a confined app can call

    Products and areas

  • The sandbox construction path, including the bubblewrap argument vector Flatpak builds and the environment it hands over

    Products and areas

  • The seccomp filters and namespace configuration Flatpak requests for an application

    Products and areas

  • The system helper, which runs with elevated privilege on behalf of an unprivileged user

    Products and areas

No target matches. Try part of a host name, such as the company name.

Out of scope 5

Don't test these. A program can exclude a host another program covers; the program you report to decides.

  • Application-level bugs in software distributed through Flathub rather than in Flatpak itself

  • bubblewrap's own privilege handling, which belongs to the Containers project's security list

  • Flathub infrastructure rather than the Flatpak codebase

  • Kernel namespace and seccomp defects

  • Permissions a user was asked for and granted, or an application installed with broad static permissions it declared honestly

Recent changes

Reward and scope changes across every Flatpak program, newest first.

No changes recorded yet. New targets and reward moves show up here and in the RSS feed.

Recent CVEs

Published vulnerabilities in Flatpak products, from the NVD.

Search NVD
  • CVE-2026-40354 Low

    Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app to trash any file in the host context via a symlink attack on g_file_trash.

  • CVE-2026-39977 High

    flatpak-builder is a tool to build flatpaks from source. From 1.4.5 to before 1.4.8, the license-files manifest key takes an array of paths to user defined licence files relative to the source directory of the module. The paths from that array are resolved using g_file_resolve_relative_path() and validated to stay inside the source directory using two checks - g_file_get_relative_path() which does

  • CVE-2026-34079 High

    Flatpak is a Linux application sandboxing and distribution framework. Prior to 1.16.4, the caching for ld.so removes outdated cache files without properly checking that the app controlled path to the outdated cache is in the cache directory. This allows Flatpak apps to delete arbitrary files on the host. This vulnerability is fixed in 1.16.4.

  • CVE-2026-34078 Critical

    Flatpak is a Linux application sandboxing and distribution framework. Prior to 1.16.4, the Flatpak portal accepts paths in the sandbox-expose options which can be app-controlled symlinks pointing at arbitrary paths. Flatpak run mounts the resolved host path in the sandbox. This gives apps access to all host files and can be used as a primitive to gain code execution in the host context. This vulne

  • CVE-2026-34080 Medium

    xdg-dbus-proxy is a filtering proxy for D-Bus connections. Prior to 0.1.7, a policy parser vulnerability allows bypassing eavesdrop restrictions. The proxy checks for eavesdrop=true in policy rules but fails to handle eavesdrop ='true' (with a space before the equals sign) and similar cases. Clients can intercept D-Bus messages they should not have access to. This vulnerability is fixed in 0.1.7.

  • CVE-2024-42472 Critical

    Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.14.0 and 1.15.10, a malicious or compromised Flatpak app using persistent directories could access and write files outside of what it would otherwise have access to, which is an attack on integrity and confidentiality. When `persistent=subdir` is used in the application permissions (represented as `--persist=

  • CVE-2024-32462 High

    Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. in versions before 1.10.9, 1.12.9, 1.14.6, and 1.15.8, a malicious or compromised Flatpak app could execute arbitrary code outside its sandbox. Normally, the `--command` argument of `flatpak run` expects to be given a command to run in the specified Flatpak app, optionally along with some arguments

  • CVE-2023-28100 Critical

    Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4 contain a vulnerability similar to CVE-2017-5226, but using the `TIOCLINUX` ioctl command instead of `TIOCSTI`. If a Flatpak app is run on a Linux virtual console such as `/dev/tty1`, it can copy text from the virtual console and paste it into th

About this page

This page gathers every public program listed under flatpak.org: platform programs, self-hosted policies and security.txt contacts. Each program's own policy decides what is in scope and what it pays; check it before you test.

Something wrong or missing? Report a correction.