Arbitrary file deletion on the host filesystem in Flatpak before 1.16.4. The caching for ld.so removes outdated cache files without properly checking that the app-controlled path to the outdated cache is in the cache directory, allowing Flatpak applications to delete arbitrary files on the host.