CVE-2024-42472

CVE-2024-42472 is a critical vulnerability in Flatpak, a Linux application sandboxing framework, affecting versions prior to 1.14.10 and 1.15.10. It allows a malicious or compromised Flatpak app using persistent directories to bypass sandbox restrictions, gaining unauthorized access and write capabilities outside its intended scope, impacting data integrity and confidentiality. With a CVSS score of 10.0 (CRITICAL), this vulnerability is easily exploitable over the network with low attack complexity, potentially leading to complete compromise of user data. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.