CVE-2026-41048

HIGH

Caching of Authentication allows Authentication Bypass in qSnapper

Title source: cna

Description

Incorrect caching of authentication between different polkit methods in qSnapper before version 1.3.3 allowed a local attacker to use functions like "restore from snapshot" even if only allowed to do "delete snapshot".

References (3)

Core 3

Core References

Third Party Advisory third-party-advisory

https://security.opensuse.org/2026/05/26/qsnapper-dbus-issues.html#issue-auth-caching

Vendor Advisory vendor-advisory

https://github.com/presire/qSnapper/releases/tag/v1.3.3

Issue Tracking issue-tracking

https://bugzilla.suse.com/show_bug.cgi?id=1262218

Scores

CVSS v3 7.1

EPSS 0.0013

EPSS Percentile 3.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-863

Status published

Products (2)

presire/qsnapper < 1.3.3

presire/qSnapper 1.2.1 - 1.3.3

Published Jun 22, 2026

Tracked Since Jun 22, 2026