CVE-2026-3888
CVSS 7.8 HIGH: local privilege escalation in snapd on Linux allows local attackers to get root privilege by re-creating snap's… EPSS 1% (72nd percentile), up from 0.5%.
Vulnerabilities · 226 days ago
Qualys Threat Research Unit disclosed CVE-2026-3888. It affects default Ubuntu Desktop installations 24.04 and later. A 10–30 day cleanup timing window between snap-confine and systemd-tmpfiles allows low-privilege local users to escalate to root, enabling full host compromise; CVSS 7.8.
CVSS 7.8 HIGH: local privilege escalation in snapd on Linux allows local attackers to get root privilege by re-creating snap's… EPSS 1% (72nd percentile), up from 0.5%.
3 sources covering this story
New Ubuntu Flaw Enables Local Attackers to Gain Root Access
CVE-2026-3888 Ubuntu snap flaw lets local users escalate to root via timing-based exploit
Ubuntu CVE-2026-3888 Bug Lets Attackers Gain Root via systemd Cleanup Timing Exploit
Ubuntu CVE-2026-3888 flaw exploits cleanup timing in snap-confine to gain root access, risking full system compromise.
CVE-2026-3888: Important Snap Flaw Enables Local Privilege Escalation to Root | Qualys
The Qualys Threat Research Unit has identified a Local Privilege Escalation (LPE) vulnerability affecting default installations of Ubuntu Desktop version 24.04 and later.
Part of the PlainSec briefing for 2026-03-18