Project Bubblewrap · Bubblewrap · CVE-2019-12439
**Name of the Vulnerable Software and Affected Versions**
bubblewrap versions prior to 0.3.3
**Description**
The issue arises from the misuse of temporary directories in /tmp as a mount point by bubblewrap.c in Bubblewrap. In specific configurations related to XDG RUNTIME DIR, a local attacker may exploit this flaw to prevent other users from executing bubblewrap or potentially execute code.
**Recommendations**
For versions prior to 0.3.3, update to version 0.3.3 or later to resolve the issue.