containers bubblewrap vulnerabilities (CVE)

CVE records published for containers bubblewrap, newest first. Follow to get an email when a new one appears.

1 results

8.7High

CVE-2026-41163 6 months ago

bubblewrap vulnerable to privilege escalation in setuid mode via ptrace

containers bubblewrap; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9

bubblewrap is a low-level unprivileged sandboxing tool. From version 0.11.0 to before version 0.11.2, if bubblewrap is installed in setuid mode then the user can use ptrace to attach to bubblewrap and control the unprivileged part of the sandbox setup phase. …