Ubuntu Snap-Confine Vulnerability Allows Unprivileged Users to Execute Code as Root

The report details a critical local privilege escalation vulnerability (CVE-2026-8933) in Ubuntu's snap-confine when configured with Linux file capabilities rather than setuid-root, affecting default installations of Ubuntu Desktop 26.04, 25.10 and updated 24.04. Qualys discovered the flaw, which enables local attackers to gain root access and potentially deploy persistent backdoors or pivot further, and Ubuntu maintainers are coordinating patches; no public proof-of-concept is widely available at disclosure.