Home / Vulnerability Intelligence / CVE-2026-3888

CVE-2026-3888 - Vulnerability Analysis

HighCVSS: 7.8

Last Updated: March 18, 2026

snapd - Privilege Escalation

Published: March 17, 2026Updated: March 18, 2026PoC Available

Overview

snapd on Linux (Ubuntu 16.04 LTS to 24.04 LTS) contains a local privilege escalation caused by re-creation of snap's private /tmp directory during systemd-tmpfiles cleanup, letting local attackers gain root privileges.

Severity & Score

Severity: High

CVSS Score: 7.8

EPSS Score: 0.6%(Probability of exploitation in next 30 days)

Impact

Local attackers can gain root privileges, fully compromising the system.

Mitigation

Update to the latest snapd version with the fix applied.

References

Social Media Activity(21 posts)

Hacker News Daily Bot

@hackernewsdaily

Mar 18, 2026

📰 Today's Top 20 Hacker News Stories (Sorted by Score) 📰 ---------------------------------------- 🔖 Title: Rob Pike's Rules of Programming (1989) 🔗 URL: https://www.cs.unc.edu/~stotts/COMP590-059-f24/robsrules.html 👍 Score: [699] 💬 Discussion: https://news.ycombinator.com/item?id=47423647 ---------------------------------------- 🔖 Title: Nightingale – open-source karaoke app that works with any song on your computer 🔗 URL: https://nightingale.cafe/ 👍 Score: [414] 💬 Discussion: https://news.ycombinator.com/item?id=47422942 ---------------------------------------- 🔖 Title: Federal Cyber Experts Called Microsoft's Cloud "A Pile of Shit", yet Approved It 🔗 URL: https://www.propublica.org/article/microsoft-cloud-fedramp-cybersecurity-government 👍 Score: [360] 💬 Discussion: https://news.ycombinator.com/item?id=47426057 ---------------------------------------- 🔖 Title: Death to Scroll Fade 🔗 URL: https://dbushell.com/2026/01/09/death-to-scroll-fade/ 👍 Score: [276] 💬 Discussion: https://news.ycombinator.com/item?id=47426932 ---------------------------------------- 🔖 Title: The pleasures of poor product design 🔗 URL: https://www.inconspicuous.info/p/the-pleasures-of-poor-product-design 👍 Score: [232] 💬 Discussion: https://news.ycombinator.com/item?id=47420432 ---------------------------------------- 🔖 Title: Write up of my homebrew CPU build 🔗 URL: https://willwarren.com/2026/03/12/building-my-own-cpu-part-3-from-simulation-to-hardware/ 👍 Score: [209] 💬 Discussion: https://news.ycombinator.com/item?id=47389696 ---------------------------------------- 🔖 Title: AI coding is gambling 🔗 URL: https://notes.visaint.space/ai-coding-is-gambling/ 👍 Score: [196] 💬 Discussion: https://news.ycombinator.com/item?id=47428541 ---------------------------------------- 🔖 Title: Snowflake AI Escapes Sandbox and Executes Malware 🔗 URL: https://www.promptarmor.com/resources/snowflake-ai-escapes-sandbox-and-executes-malware 👍 Score: [179] 💬 Discussion: https://news.ycombinator.com/item?id=47427017 ---------------------------------------- 🔖 Title: OpenRocket 🔗 URL: https://openrocket.info/ 👍 Score: [164] 💬 Discussion: https://news.ycombinator.com/item?id=47386703 ---------------------------------------- 🔖 Title: Show HN: Hacker News archive (47M+ items, 11.6GB) as Parquet, updated every 5m 🔗 URL: https://huggingface.co/datasets/open-index/hacker-news 👍 Score: [148] 💬 Discussion: https://news.ycombinator.com/item?id=47378781 ---------------------------------------- 🔖 Title: Nvidia NemoClaw 🔗 URL: https://github.com/NVIDIA/NemoClaw 👍 Score: [138] 💬 Discussion: https://news.ycombinator.com/item?id=47427027 ---------------------------------------- 🔖 Title: Celebrating Tony Hoare's mark on computer science 🔗 URL: https://bertrandmeyer.com/2026/03/16/celebrating-tony-hoares-mark-on-computer-science/ 👍 Score: [108] 💬 Discussion: https://news.ycombinator.com/item?id=47422228 ---------------------------------------- 🔖 Title: Machine Payments Protocol (MPP) 🔗 URL: https://stripe.com/blog/machine-payments-protocol 👍 Score: [98] 💬 Discussion: https://news.ycombinator.com/item?id=47426936 ---------------------------------------- 🔖 Title: Using calculus to do number theory 🔗 URL: https://hidden-phenomena.com/articles/hensels 👍 Score: [78] 💬 Discussion: https://news.ycombinator.com/item?id=47399330 ---------------------------------------- 🔖 Title: Google Engineers Launch "Sashiko" for Agentic AI Code Review of the Linux Kernel 🔗 URL: https://www.phoronix.com/news/Sashiko-Linux-AI-Code-Review 👍 Score: [62] 💬 Discussion: https://news.ycombinator.com/item?id=47427647 ---------------------------------------- 🔖 Title: Wander – A tiny, decentralised tool (just 2 files) to explore the small web 🔗 URL: https://susam.net/wander/ 👍 Score: [56] 💬 Discussion: https://news.ycombinator.com/item?id=47427290 ---------------------------------------- 🔖 Title: A ngrok-style secure tunnel server written in Rust and Open Source 🔗 URL: https://github.com/joaoh82/rustunnel 👍 Score: [50] 💬 Discussion: https://news.ycombinator.com/item?id=47425918 ---------------------------------------- 🔖 Title: 2025 Turing award given for quantum information science 🔗 URL: https://awards.acm.org/about/2025-turing 👍 Score: [48] 💬 Discussion: https://news.ycombinator.com/item?id=47423694 ---------------------------------------- 🔖 Title: Wanter – A tiny, decentralised tool to explore the small web 🔗 URL: https://susam.net/wander/ 👍 Score: [44] 💬 Discussion: https://news.ycombinator.com/item?id=47422759 ---------------------------------------- 🔖 Title: CVE-2026-3888: Important Snap Flaw Enables Local Privilege Escalation to Root 🔗 URL: https://blog.qualys.com/vulnerabilities-threat-research/2026/03/17/cve-2026-3888-important-snap-flaw-enables-local-privilege-escalation-to-root 👍 Score: [33] 💬 Discussion: https://news.ycombinator.com/item?id=47427208 ----------------------------------------

CVE-2026-3888 - Vulnerability Analysis

Overview

Severity & Score

Impact

Mitigation

References

Social Media Activity(21 posts)

GitHub Repositories(1 repo)

Related Resources

Details

CWE

CVSS Metrics

EPSS Score