The vulnerability in Flatpak's system helper allows a malicious user to read arbitrary files within the flatpak-system-helper context. The flaw arises because OCI image imports use symlink resolution when a system OCI repository is configured. An attacker can place a symlink in a user‑controlled OCI image that points to a protected file, and the system helper will follow the link and expose the file's contents to the user. This leads to information disclosure across privileged boundaries (CWE‑59).

The issue affects Red Hat Enterprise Linux releases 7, 8, 9 and 10 that run Flatpak with any system OCI remote configured. It applies to all Red Hat distributions where the system helper processes OCI images from system‑level repositories. No specific Flatpak version or RHEL patch level was cited, so any host using Flatpak with a system OCI remote is potentially exposed.

The CVSS score of 2.5 indicates low severity in the CVSS context, and the EPSS is not available, meaning no published data on exploit prevalence. The vulnerability is not listed in the CISA KEV catalog. Likely attack vectors require a user who can influence the system OCI repository or deploy OCI images and trigger the system helper import. The recommended mitigation is the CNA workaround: remove all system OCI remotes. Until an official patch is released, disabling symlink following for system helper code or updating to a patched Flatpak build is advised.