Oh Snap! More Lemmings: Local Privilege Escalation Vulnerability Discovered in snap-confine (CVE-2021-44731) | Qualys

Summary: The Qualys Research Team discovered multiple vulnerabilities in snap-confine, the program snapd uses to build the execution environment for sandboxed snap applications on Linux, the most important tracked as CVE-2021-44731. Qualys researchers verified the flaw, developed an exploit, and obtained full root privileges on default Ubuntu installations, with exploitation allowing any unprivileged user to gain root on the vulnerable host.
Bottom line: Qualys states that all versions of the snap package manager were vulnerable as of its disclosure, and that an attacker who can log in as any unprivileged user can quickly turn that foothold into root.

Read the original at Qualys Blog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2021-44731
Related: Snapd Race Condition Vulnerability in snap-confine’s must_mkdir_and_open_with_perms() (CVE-2022-3328) | Qualys Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026