Local Privilege Escalation Vulnerability in Canonical Snapd
CVE-2026-8933

7.8HIGH

Key Information:

Status
Ubuntu 26.04 Lts
Ubuntu 24.04 Lts
Ubuntu 22.04 Lts
Vendor
CVE Published:
21 July 2026

What is CVE-2026-8933?

A local privilege escalation vulnerability in snap-confine, a component of Canonical's snapd responsible for creating a secure environment for snap applications, can be exploited by attackers. This vulnerability affects versions that are configured with set-capabilities rather than standard set-uid-root installations. Flaws in initializing privilege boundaries during execution under restricted capabilities allow an unprivileged local user to bypass security measures and execute arbitrary code. Successful exploitation enables the attacker to gain full root privileges, posing a significant security risk to the affected systems.

References

https://ubuntu.com/security/CVE-2026-8933
vdb-entryissue-tracking

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Qualys Security Advisory Team
.