Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

Bubblewrap can run malicious code

published 4 days ago
Summary

The bubblewrap utility (cleanstart/bubblewrap) before version 0 can be tricked into executing code it shouldn't. This could let an attacker run unauthorized commands on the system. Upgrade bubblewrap to version 0 or later to remove the risk.

What to do
  • Update cleanstart bubblewrap to version 0.4.1-r0.
Affected software
Ecosystem VendorProductAffected versions
CleanStart cleanstart bubblewrap < 0.4.1-r0
Fix: upgrade to 0.4.1-r0
Original advisory text
Bubblewrap (bwrap) before version 0
Security vulnerability affects the bubblewrap package. Bubblewrap (bwrap) before version 0.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
7.8 High
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2026-BU38486 · OSV
Track software like this
Free during beta