PatchTheCVExdg-desktop-portal vulnerabilities and fixes
Recent CVEs affecting xdg-desktop-portal, with upgrade or downgrade steps. 1 tracked.
Also searched as: xdg desktop portal.
xdg-desktop-portal has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-04-11. Highest priority: CVE-2026-40354 (score 11/100).
- CVE-2026-40354 LOW 2.9 UPGRADE Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app to trash any file in
FAQ
How do I fix xdg-desktop-portal vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is xdg-desktop-portal being exploited right now?
None of the tracked xdg-desktop-portal CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which xdg-desktop-portal CVE should I patch first?
CVE-2026-40354 currently ranks highest (11/100): Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app to trash any file in .