PT-2026-61944 · Canonical · Snapd

Zygmunt Krynicki · CVE-2026-15226 · Published 2026-07-21 · Updated 2026-07-21

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Canonical snapd (affected versions not specified)

Description A sandbox confinement bypass exists in the internal execution environment compiler (snap-confine). The default seccomp security templates, which are used to restrict system calls, fail to filter or reject operations that create or manipulate file execution flags with set-user-ID attributes. This allows an application in a strictly confined environment to compile or drop binaries and apply setuid properties to them. A malicious process can then execute these binaries to bypass sandboxing assumptions, remove restriction policies, or perform privileged actions within the container namespace.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-250

Related Identifiers

CVE-2026-15226

USN-8579-1

Affected Products

Snapd

References · 8

• https://osv.dev/vulnerability/USN-8579-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-15226 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-15226 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-8933 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-15226 · Security Note
• https://ubuntu.com/security/CVE-2024-5300 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8579-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-15226 · Security Note