Bubblewrap: Root privilege escalation — GLSA 202608-09

A vulnerability has been discovered in Bubblewrap that would allow root privilege escalation.

Package	sys-apps/bubblewrap on all architectures
Affected versions	< 0.11.2
Unaffected versions	>= 0.11.2

Bubblewrap is an unprivileged sandboxing tool namespaces-powered chroot-like solution.

A vulnerability has been discovered in Bubblewrap. Please review the CVE identifier referenced below for details.

An attacker could achieve root privilege escalation if Bubblewrap is used in its suid mode.

There is no known workaround at this time.

All Bubblewrap users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=sys-apps/bubblewrap-0.11.2"

Release date
August 14, 2026

Latest revision
August 14, 2026: 1

Severity
high

Exploitable
local

Bugzilla entries