CVE catalog

CVE-2026-62294

Flameshot is powerful yet simple to use screenshot software. Prior to 14.0.0, the Open With feature wrote screenshots to a predictable temporary path and followed symlinks, creating a time-of-check to

[CVE catalog]

Severity
Medium · CVSS 5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Published
Source
[NVD] · [CVE record]
EPSS
0.14% · Oct 25, 2026

Flameshot is powerful yet simple to use screenshot software. Prior to 14.0.0, the Open With feature wrote screenshots to a predictable temporary path and followed symlinks, creating a time-of-check to time-of-use race that allowed a local unprivileged attacker on the same machine to pre-plant a symlink and cause Flameshot to write PNG data through it, overwriting any file the victim user could write. This issue is fixed in version 14.0.0.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianflameshotsid14.0.0-4fixed
Debianflameshotforky14.0.0-4fixed
Debianflameshottrixie12.1.0+ds-2vulnerable
Debianflameshotbookworm12.1.0-2vulnerable
CpeflameshotNot reportedNot reportedvulnerable
Ubuntuflameshot18.040.5.0+git20180114-1vulnerable
Ubuntuflameshot18.040.5.0+git20180222-1vulnerable
Ubuntuflameshot18.040.5.1-1vulnerable
Ubuntuflameshot18.040.5.1-2vulnerable
Ubuntuflameshot20.040.6.0+git20190714-1vulnerable
Ubuntuflameshot20.040.6.0+git20191001-1vulnerable
Ubuntuflameshot20.040.6.0+git20191001-2vulnerable
Ubuntuflameshot22.040.9.0+ds1-2vulnerable
Ubuntuflameshot22.040.10.1+ds1-1vulnerable
Ubuntuflameshot22.040.10.2+ds1-1vulnerable
Ubuntuflameshot22.040.10.2+ds1-2vulnerable
Ubuntuflameshot22.040.10.2+ds1-3vulnerable
Ubuntuflameshot22.0411.0~rc1+ds1-1vulnerable
Ubuntuflameshot22.0411.0~rc1+ds1-2vulnerable
Ubuntuflameshot22.0411.0.0-2vulnerable
Ubuntuflameshot24.0412.1.0-2vulnerable
Ubuntuflameshot24.0412.1.0-2build1vulnerable
Ubuntuflameshot24.0412.1.0-2build2vulnerable
Ubuntuflameshot26.0412.1.0+ds-2vulnerable
Ubuntuflameshot26.0412.1.0+ds-3vulnerable
Ubuntuflameshot26.0412.1.0+ds-4vulnerable
Ubuntuflameshot26.0413.3.0-1vulnerable
Ubuntuflameshot26.0413.3.0-2vulnerable
Ubuntuflameshot26.0413.3.0+git20251204-1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianflameshotsourcesid14.0.0-1unimportantNot reportedNot reported
Debianflameshotsourceforky14.0.0-1unimportantNot reportedNot reported
Debianflameshotsourcetrixie(unfixed)unimportantNot reportedNot reported
Debianflameshotsourcebookworm(unfixed)unimportantNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [flameshot]Affected
    Details (2)

    • 12.1.0-2 · amd64 · bookworm

      Affected

      nvd · flameshot · debian · bookworm; nvd · flameshot · debian · 12

    • 12.1.0-2 · arm64 · bookworm

      Affected

      nvd · flameshot · debian · bookworm; nvd · flameshot · debian · 12

[Debian 13 (Trixie)]

  • [flameshot]Affected
    Details (4)

    • 12.1.0+ds-2 · amd64 · trixie

      Affected

      nvd · flameshot · debian · 13

    • 12.1.0+ds-2 · arm64 · trixie

      Affected

      nvd · flameshot · debian · 13

    • 13.3.0+git20251204-1~bpo13+1 · amd64 · trixie-backports

      Affected

      nvd · flameshot · debian · 13

    • 13.3.0+git20251204-1~bpo13+1 · arm64 · trixie-backports

      Affected

      nvd · flameshot · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]