Skip to content
Critical Local Privilege Escalation Vulnerability in Ubuntu Snapd

Critical Local Privilege Escalation Vulnerability in Ubuntu Snapd

First seen 22 Jul 2026, 02:53 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •July 23, 2026 at 01:24 UTC
  • •CVE-2026-8933 allows local users to escalate privileges to root on affected Ubuntu systems.
  • •The vulnerability affects default installations of Ubuntu Desktop versions 24.04, 25.10, and 26.04.
  • •Qualys identified the flaw stemming from a race condition introduced in a July 2025 security update.

A critical vulnerability (CVE-2026-8933) in Ubuntu's snap-confine component allows local users to gain root access on default installations of Ubuntu Desktop versions 24.04, 25.10, and 26.04. Discovered by Qualys, the flaw arises from a race condition during sandbox setup due to a security hardening change made in July 2025. Attackers can exploit this vulnerability by mounting a FUSE filesystem over a temporary directory and using symlinks to write to arbitrary files. The flaw affects a wide range of systems, including employee workstations and administrative endpoints, as the affected snapd package is included in default installations. Administrators are urged to apply the latest updates to mitigate the risk. The vulnerability was disclosed on July 21, 2026, alongside other related issues in snapd.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 51d ago How this analysis works

Timeline

2026-07-21
CVE-2026-8933 published
Qualys disclosed a critical local privilege escalation vulnerability in Ubuntu's snap-confine component affecting multiple Ubuntu Desktop versions.
Ubuntu
2026-07-21
CVE-2024-5300 published
A vulnerability in snapd's apparmor template was disclosed, allowing local attackers to access sensitive information.
Ubuntu
2026-07-21
CVE-2026-15226 published
A flaw in snapd's seccomp template was disclosed, enabling local attackers to create and execute setuid binaries.
Ubuntu
2026-07-22
Qualys warns about exploitation risks
Qualys highlighted the potential for local privilege escalation flaws to be exploited, emphasizing the need for immediate updates.
Infosecurity-Magazine

More articles in this cluster (12)

Following this threat?

Track Ubuntu and CVE-2024-5300 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (12)

1 / 4