CVE-2026-41046

Name of the Vulnerable Software and Affected Versions qSnapper versions prior to 1.3.3

Description A path traversal issue exists when using the configName parameter. This allows a local attacker to utilize malicious configuration files for snapper, which can lead to a denial of service or potential privilege escalation to root. Path traversal is a technique that allows an attacker to access files and directories that are stored outside the web root folder.

Recommendations Update to version 1.3.3 or later. Avoid using the configName parameter until the update is applied.