Vulnerability in Presire Qsnapper
CVE-2026-41048
Incorrect caching of authentication between different polkit methods in qSnapper before version 1.3.3 allowed a local attacker to use functions like "restore from snapshot" even if only allowed to do "delete snapshot".
Affected products
- Presire Qsnapper — versions 1.2.1
Weakness classification (CWE)
References
- meissner@suse.de (third-party-advisory)
- meissner@suse.de (vendor-advisory)
- meissner@suse.de (issue-tracking)