CVE-2017-9780

CVE-2017-9780 is a high-severity vulnerability affecting Flatpak versions prior to 0.8.7, including those in Debian Linux. This flaw allows malicious third-party app repositories to deploy applications with inappropriate permissions, such as setuid or world-writable files. A local attacker could exploit this to execute code with elevated privileges, potentially root, or write to sensitive locations. While no public exploits or active exploitation have been identified, the vulnerability has garnered some community discussion.