CVE-2021-3155

snapd 2.54.2 and earlier created ~/snap directories in user home directories without specifying owner-only permissions. This could allow a local attacker to read information that should have been private. Fixed in snapd versions 2.54.3+18.04, 2.54.3+20.04 and 2.54.3+21.10.1

• CWE-276
• CWE-276

• https://github.com/snapcore/snapd/commit/6bcaeeccd16ed8298a301dd92f6907f88c24cc85Patch, Third Party Advisory
• https://github.com/snapcore/snapd/commit/7d2a966620002149891446a53cf114804808dccaPatch, Third Party Advisory
• https://ubuntu.com/security/notices/USN-5292-1Patch, Vendor Advisory
• https://github.com/snapcore/snapd/commit/6bcaeeccd16ed8298a301dd92f6907f88c24cc85Patch, Third Party Advisory
• https://github.com/snapcore/snapd/commit/7d2a966620002149891446a53cf114804808dccaPatch, Third Party Advisory
• https://ubuntu.com/security/notices/USN-5292-1Patch, Vendor Advisory

Published

Feb 17, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-31542In Django 2.2 before 2.2.21, 3.1 before 3.1.9, and 3.2 befor…7.5
• CVE-2021-31545An issue was discovered in the AbuseFilter extension for Med…5.3
• CVE-2021-31546An issue was discovered in the AbuseFilter extension for Med…4.3
• CVE-2021-31547An issue was discovered in the AbuseFilter extension for Med…4.3
• CVE-2021-31548An issue was discovered in the AbuseFilter extension for Med…6.5
• CVE-2021-31549An issue was discovered in the AbuseFilter extension for Med…4.3
• CVE-2021-31550An issue was discovered in the CommentBox extension for Medi…5.4
• CVE-2021-31551An issue was discovered in the PageForms extension for Media…6.1
• CVE-2021-31552An issue was discovered in the AbuseFilter extension for Med…5.4
• CVE-2021-31553An issue was discovered in the CheckUser extension for Media…6.5
• CVE-2021-31554An issue was discovered in the AbuseFilter extension for Med…5.4
• CVE-2021-31555An issue was discovered in the Oauth extension for MediaWiki…7.5