A vulnerability categorized as problematic has been discovered in Flatpak . Affected is an unknown function of the component Addressbook File Backend . The manipulation results in file inclusion. This vulnerability was named CVE-2026-2604 . The attack needs to be approached locally. There is no available exploit. It is advisable to upgrade the affected component.