CVE-2026-3888— Local Privilege Escalation in snapd
Quick assessment
Affected
Canonical Ubuntu 16.04 LTS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Canonical Ubuntu Linux是英国科能软件（Canonical）公司的一套Linux操作系统。 Canonical Ubuntu Linux存在安全漏洞，该漏洞源于snapd允许本地攻击者在systemd-tmpfiles配置为自动清理时重新创建snap的私有/tmp目录，可能导致本地权限提升。
Possible ATT&CK Techniques 1 AI
T1068 · Exploitation for Privilege Escalation
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-3888
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Local Privilege Escalation in snapd
Source: CVE Program / CVE List V5
Vulnerability Description
Local privilege escalation in snapd on Linux allows local attackers to get root privilege by re-creating snap's private /tmp directory when systemd-tmpfiles is configured to automatically clean up this directory. This issue affects Ubuntu 16.04 LTS, 18.04 LTS, 20.04 LTS, 22.04 LTS, and 24.04 LTS.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
特权链锁
Source: CVE Program / CVE List V5
Vulnerability Title
Canonical Ubuntu Linux 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Canonical Ubuntu Linux是英国科能软件（Canonical）公司的一套Linux操作系统。 Canonical Ubuntu Linux存在安全漏洞，该漏洞源于snapd允许本地攻击者在systemd-tmpfiles配置为自动清理时重新创建snap的私有/tmp目录，可能导致本地权限提升。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Canonical | Ubuntu 16.04 LTS | 2.61.4ubuntu0.16.04.1+esm2 ~ * | - |
|
| Canonical | Ubuntu 18.04 LTS | 2.61.4ubuntu0.18.04.1+esm2 ~ * | - |
|
| Canonical | Ubuntu 20.04 LTS | 2.67.1+20.04ubuntu1~esm1 ~ * | - |
|
| Canonical | Ubuntu 22.04 LTS | 2.73+ubuntu22.04.1 ~ * | - |
|
| Canonical | Ubuntu 24.04 LTS | 2.73+ubuntu24.04.2 ~ * | - |
|
II. Public POCs for CVE-2026-3888
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-3888
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-3888 (2)
-
Snapd - Local Privilege Escalation (CVE-2026-3888) - Project Discussion / Security - Ubuntu Community Hub technical-description vendor-advisory
Security Blog Posts for CVE-2026-3888 (1)
-
CVE-2026-3888: Important Snap Flaw Enables Local Privilege Escalation to Root | Qualys technical-description media-coverage
IV. Related Vulnerabilities
Same weakness: CWE-268
V. Comments for CVE-2026-3888
No comments yet