CVE-2026-41048

Name of the Vulnerable Software and Affected Versions qSnapper versions prior to 1.3.3

Description Incorrect caching of authentication between different polkit (PolicyKit, a component for controlling privileges in Unix-like operating systems) methods allows a local attacker to perform unauthorized actions. Specifically, an attacker could execute functions such as restoring from a snapshot even if they are only authorized to delete snapshots.

Recommendations Update to version 1.3.3 or later.