CVE-2026-41048 — Caching of Authentication allows Authentication Bypass in qSnapper
Incorrect caching of authentication between different polkit methods in qSnapper before version 1.3.3 allowed a local attacker to use functions like "restore from snapshot" even…
Published: 2026-06-22 · CVSS: 8.4 · CVSS 4.0
Incorrect caching of authentication between different polkit methods in qSnapper before version 1.3.3 allowed a local attacker to use functions like "restore from snapshot" even if only allowed to do "delete snapshot".
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7