Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Ubuntu 26.04 LTS Bubblewrap Low Sandbox Bypass Vuln USN-8288-1

ubuntu
Calendar Grey May 21, 2026
Dist Ubuntu Esm H88
Bubblewrap for Ubuntu has a low severity issue allowing potential sandbox bypass by local attackers. Update recommended.
Bubblewrap could be made to bypass sandbox restrictions.

Summary

Bubblewrap could be made to bypass sandbox restrictions.

Software Description:

- bubblewrap: Low-level unprivileged sandboxing tool used by Flatpak and similar projects

Details:

It was discovered that Bubblewrap incorrectly handled the sandbox

setup phase when installed in setuid mode. A local attacker could

possibly use this issue to bypass sandbox restrictions.

Topics%20covered

Topics Covered

security advisory Ubuntu local attack low bypass restrictions bubblewrap

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  bubblewrap                      0.11.1-1ubuntu0.1

Ubuntu 25.10
  bubblewrap                      0.11.0-2ubuntu0.1

In general, a standard system update will make all the necessary
changes.

References

https://ubuntu.com/security/notices/USN-8288-1

CVE-2026-41163

Severity
low
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-8288-1

Topics%20covered

Topics Covered

security advisory Ubuntu local attack low bypass restrictions bubblewrap

Package Information

https://launchpad.net/ubuntu/+source/bubblewrap/0.11.1-1ubuntu0.1
https://launchpad.net/ubuntu/+source/bubblewrap/0.11.0-2ubuntu0.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here