Storyline

Ubuntu snapd vulnerability allows local privilege escalation to root

A critical security flaw (CVE-2026-3888) in Ubuntu's snapd daemon enables local attackers to escalate privileges to root by exploiting timing issues during systemd-tmpfiles cleanup of the snap's private /tmp directory. The vulnerability affects multiple Ubuntu LTS versions including 16.04 through 24.04.

Evidence locked

Today's free sample is only available for the edition's flagship storyline.

Back Unlock Pro

Evidence preview

Ubuntu Security Notices
ubuntu.com
New Ubuntu Flaw Enables Local Attackers to Gain Root Access
Infosecurity Magazine
Ubuntu CVE-2026-3888 Bug Lets Attackers Gain Root via systemd Cleanup Timing Exploit
thehackernews
snapd: CVSS (Max): 7.8
AusCERT - Bulletins