CVE-2026-8933 Details

A local privilege escalation vulnerability has been identified in snap-confine, a core component of Canonical's snapd that manages the secure execution environment for snap applications. This issue affects specific versions of snap-confine that are configured with set-capabilities, as opposed to the standard set-uid-root installations. The vulnerability arises from a flaw in how privilege boundaries and security sandboxes are established when the binary operates under limited ambient capabilities. This allows a local, unprivileged attacker to exploit the behavior, bypass intended restrictions, and execute arbitrary code. Successful exploitation enables the attacker to gain full root privileges.