CVE-2026-41045
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
A time-to-check-time-of-use vulnerability in the polkit authentication of qSnapper before version 1.3.3 allowed a local attacker to bypass qSnapper's authentication mechanism and operate with root privileges.
Risk Assessment
A local attacker can gain full system control by performing operations with administrator privileges, compromising data confidentiality, integrity, and availability.
Recommendation
Immediately update qSnapper to version 1.3.3 or later, which includes a fix for the TOCTOU vulnerability.
Other vulnerabilities in qSnapper
See all- CVE-2026-41049High
Incorrect caching of authentication between different users in the qSnapper dbus service before version 1.3.3 allows any local attacker to use dbus functions after a privileged user has authenticated.
- CVE-2026-41048High
In qSnapper before version 1.3.3, incorrect caching of authentication between different polkit methods allowed a local attacker to use functions like 'restore from snapshot' even if only allowed to do 'delete snapshot'.
- CVE-2026-41047Medium
In qSnapper before version 1.3.3, lack of authentication in the "snapshot diff" functions allowed a local attacker to read otherwise read-protected information.
- CVE-2026-41046High
A path traversal vulnerability in qSnapper before version 1.3.3 allows a local attacker to use malicious snapper config files via the "configName" parameter. This can lead to denial of service or potential privilege escalation to root.
Original NVD description (English source)
A time-to-check-time-of-use in polkit authentication of qSnapper before version 1.3.3 allowed a local attacker to bypass qSnappers authentication mechanism and operate e.g. as root user.