VULNERABILITY INTELLIGENCE

CVE-2026-41048

CVSS score7.1 HIGH

EPSS probability0.18%

CISA KEVNot currently listed

Published2026-06-22

Last modified2026-10-25

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Description

Incorrect caching of authentication between different polkit methods in qSnapper before version 1.3.3 allowed a local attacker to use functions like "restore from snapshot" even if only allowed to do "delete snapshot".

Weakness classification

meissner@suse.de: CWE-863
nvd@nist.gov: CWE-863

Primary references

meissner@suse.de — Issue Tracking, Third Party Advisory
meissner@suse.de — Third Party Advisory
meissner@suse.de — Vendor Advisory