Flatpak 1.18.4 closes six ways a malicious app could reach the host
One release, six CVEs: privileged overwrites and deletions of host files, an authentication token visible to other users, loose temporary-directory permissions, unfiltered desktop and D-Bus files, and a signal that could kill the desktop environment.