Flatpak is writing OCI repository authentication tokens with world-readable permissions (0644) in the system-helper’s cache directory. This allows any local user on a multi-user RHEL system to read the token and then use it to authenticate to the OCI repository as the originally authenticated user, effectively bypassing proper access controls. The vulnerability is therefore a local credential exposure leading to potential unauthorized access to OCI registry contents or services.

Red Hat Enterprise Linux releases 7 through 10 running Flatpak with OCI‑based sources are affected. Libostree‑based sources, such as those from Flathub, are explicitly not impacted.

The CVSS score is 3.2, indicating low severity, and the EPSS score is not available, suggesting limited exploitation activity to date. This is not listed in the CISA KEV catalog, and the attack is local, requiring knowledge of the OCI repository and the presence of the token file, which is stored in a widely accessible cache area. While the risk of exploitation in a tightly controlled environment may be low, multi‑user systems with privileged OCI access should consider the potential for local impersonation.