CVE-2026-3888
Local privilege escalation in snapd on Linux allows local attackers to get root privilege by re-creating snap's private /tmp directory when systemd-tmpfiles is configured to automatically clean up this directory. This issue affects Ubuntu 16.04 LTS, 18.04 LTS, 20.04 LTS, 22.04 LTS, and 24.04 LTS.
Scoring
- Severity
- HIGH
- CVSS base score
- 7.8
- CVSS vector
- CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
- EPSS probability
- 0.38%
- CWE
- CWE-268
- Published
- 2026-03-17
- Last modified
- 2026-03-19
Affected products
- Canonical Ubuntu 16.04 LTS
- Canonical Ubuntu 18.04 LTS
- Canonical Ubuntu 20.04 LTS
- Canonical Ubuntu 22.04 LTS
- Canonical Ubuntu 24.04 LTS
- Canonical Ubuntu 24.04 LTS
Weakness type
Related vulnerabilities
- CVE-2026-32325 — Privilege chaining issue exists in ServerView Agents for Windows V11.60.04 and earlier. If this...
- CVE-2025-64701 — QND Premium/Advance/Standard Ver.11.0.9i and prior contains a privilege escalation vulnerability,...
- CVE-2025-7973 — Rockwell Automation FactoryTalk® ViewPoint Privilege Escalation Vulnerability
- CVE-2025-36124 — IBM WebSphere Application Server Liberty bypass security
- CVE-2025-2297 — Privilege Management for Windows - Elevation of Privilege
- CVE-2025-49741 — Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
- CVE-2025-20112 — Cisco Unified Communications Products Privilege Escalation Vulnerability
- CVE-2025-32955 — Harden-Runner Evasion of 'disable-sudo' policy