PatchTheCVEflutter vulnerabilities
Recent CVEs affecting flutter products. 3 tracked.
flutter has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-02-25. Highest priority: CVE-2026-27704 (score 40/100).
- CVE-2026-27704 HIGH 7.5 UPGRADE UPGRADE The Dart and Flutter SDKs provide software development kits for the Dart programming language
- CVE-2024-54462 HIGH 7.1 MITIGATE The file names constructed within image_picker are missing sanitization checks leaving them vulnerable to mali
- CVE-2024-54461 HIGH 7.1 DOWNGRADE The file names constructed within file_selector are missing sanitization checks leaving them vulnerable to mal
FAQ
How do I fix flutter vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is flutter being exploited right now?
None of the tracked flutter CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which flutter CVE should I patch first?
CVE-2026-27704 currently ranks highest (40/100): The Dart and Flutter SDKs provide software development kits for the Dart programming language.