---
id: CVE-2026-55888
title: >-
  xdg-desktop-portal: xdg-desktop-portal: Unauthorized host file access via
  unvalidated FileChooser filenames (CVE-2026-55888)
summary: >-
  A flaw was found in xdg-desktop-portal. An attacker operating a sandboxed
  application can bypass isolation boundaries to gain unauthorized access to
  host files. This issue occurs because the FileChooser interface fails to
  properly validate…
severity: high
cvss: 8.2
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H'
cvssSource: vendor
cwe: CWE-22
vendor: Red Hat
product: Red Hat Enterprise Linux 7
affected:
  - enterprise_linux 10
  - enterprise_linux 7
  - enterprise_linux 8
  - enterprise_linux 9
published: '2026-10-23'
updated: '2026-10-23'
sourceUpdated: '2026-10-23T18:10:31+00:00'
source: CSAF
sourceUrl: 'https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-55888.json'
references:
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-55888.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-55888'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2559766'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-55888'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-55888'
  - url: 'https://github.com/flatpak/xdg-desktop-portal/releases/tag/1.22.1'
  - url: >-
      https://github.com/flatpak/xdg-desktop-portal/security/advisories/GHSA-cm83-2936-gxjm
tags:
  - csaf
  - vex
  - red-hat
  - cve.org
scores:
  vendor: 8.2
  cna: 8.8
ingestedAt: '2026-10-23T13:24:55.510Z'
epss: 0.00383
epssPercentile: 0.32124
---

## Overview

A flaw was found in xdg-desktop-portal. An attacker operating a sandboxed application can bypass isolation boundaries to gain unauthorized access to host files. This issue occurs because the FileChooser interface fails to properly validate filenames before passing them to backend services. Consequently, a malicious application can create and manipulate arbitrary files on the host system, limited only by the permissions of the current user.

## Vendor advisories

- **Red Hat VEX** · Important · affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 · no fix planned: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 · updated 2026-10-23 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-55888.json)

**xdg-desktop-portal: xdg-desktop-portal: Unauthorized host file access via unvalidated FileChooser filenames** — rated Important by Red Hat. Released 2026-10-23.

Affected:

- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9

No fix planned:

- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9

## Remediation

Affected