CVE-2026-8933: A vulnerability in snap-confine allows root elevation on default Ubuntu Desktop

Researchers have disclosed a local privilege escalation (LPE) vulnerability in snap-confine, which is present by default on Ubuntu Desktop: an unprivileged user can gain full root access on the target machine.

What happened

Researchers disclosed CVE-2026-8933 (CVSS score: 7.8), an LPE (Local Privilege Escalation) vulnerability in snap-confine, the component responsible for confining Snap applications on Ubuntu. snap-confine is installed and active by default on Ubuntu Desktop.

The flaw allows an unprivileged user—without sudo, without admin rights—to trigger a condition leading to full root access on the targeted environment.

What we know

• CVE: CVE-2026-8933 | CVSS: 7.8 (High)
• Vector: local - standard user account on the machine required
• Impact: full control of the environment
• Affected installations: Ubuntu Desktop in its default configuration (Snap active)

Facts vs analysis

The local vector tempers urgency for servers without third-party shell access. However, it is a serious vector in multi-user environments (labs, VDI, shared workstations), CI/CD pipelines with contributors having shell access, and in post-exploitation to escalate after an initial compromise via another flaw.