Ubuntu snap-confine LPE Flaw Gives Local Users Root (CVE-2026-8933)

Thu, 23 Jul 2026 12:47:45 +0000

Engineer — Act: Public PoC on GitHub makes this practical for any attacker with local access on Ubuntu Desktop 24.04, 25.10, or 26.04; patch snap-confine immediately on affected desktop systems and audit cloud VMs or developer workstations running Ubuntu Desktop builds.
SOC/IR — Learn: No active exploitation campaign or IOCs reported; file as a post-exploitation step an attacker with foothold could use, but there is no detection hunt to run today without observed in-the-wild activity.
Leader — Skip
Signals: CVE-2026-8933 — CISA KEV: not listed, EPSS 0.00, public PoC on GitHub

Ubuntu on CuraSec