Security Advisory
CVE-2026-41046
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
A path traversal attack when using a "configName" parameter in qSnapper before version 1.3.3 allowed a local attacker to use malicious config files for snapper and so cause a denial of service or potentially escalate privileges to root.