Skip to content
OpenAdvisories

Product · containers

bubblewrap

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.7
    CVE-2026-41163

    bubblewrap vulnerable to privilege escalation in setuid mode via ptrace

    bubblewrap is a low-level unprivileged sandboxing tool. From version 0.11.0 to before version 0.11.2, if bubblewrap is installed in setuid mode then the user can use ptrace to attach to bubblewrap and control the unprivileged part of the sandbox setup phase. …

    containers bubblewrap bubblewrap bubblewrap Debian Ubuntu
  • High 7.2
    CVE-2020-5291

    Privilege escalation in setuid mode via user namespaces in Bubblewrap

    Bubblewrap (bwrap) before version 0.4.1, if installed in setuid mode and the kernel supports unprivileged user namespaces, then the `bwrap --userns2` option can be used to make the setuid process keep running as root while being traceable. This can in turn be…

    containers bubblewrap bubblewrap bubblewrap Debian Ubuntu Alpine