CVE-2026-8933
snap-confine Local Privilege Escalation via Capabilities Misconfiguration or Flaw in Execution Environment Setup
A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used internally by Canonical snapd to construct the secure execution environment for snap applications. This vulnerability uniquely affects versions of snap-confine configured with set-capabilities (rather than standard set-uid-root installations). Due to a flaw in how privilege boundaries or security sandboxes are initialized when the binary runs under limited ambient capabilities, a local, unprivileged attacker can exploit this behavior to bypass intended restrictions and execute arbitrary code. Successful exploitation allows the local user to elevate their privileges to full root authority.
- Affected
- Canonical · snapd · Ubuntu 26.04 LTS · Ubuntu 24.04 LTS · Ubuntu 22.04 LTS
- CVSS v3.1 UBUNTU
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- 0.18% chance of exploitation in the next 30 days, 7th percentile
- Published
- 2026-07-21
- Updated
- 2026-07-22
Proof-of-concept exploits (1)
- songzzzz/CVE-2026-89330★ · 2026-10-17