PatchTheCVECVE-2024-1724: In snapd versions prior to 2.62, when using AppArmor for enforcement of sandbox permissions, snapd failed to
CVE-2024-1724 is a medium-severity flaw (CVSS 6.3) affecting snapd. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
In snapd versions prior to 2.62, when using AppArmor for enforcement of sandbox permissions, snapd failed to restrict writes to the $HOME/bin path. In Ubuntu, when this path exists, it is automatically added to the users PATH. An attacker who could convince a user to install a malicious snap which used the 'home' plug could use this vulnerability to install arbitrary scripts into the users PATH which may then be run by the user outside of the ex
Why this priority
- Public exploit reference
A fixed release or distro patch exists.
Risk facts
| CVSS score | 6.3 (Medium) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.3% (top 77%) |
| CISA exploited list | No |
| Weakness | CWE-732 |
| Published | 2024-07-25 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-1724?
snapd: upgrade to 2.62. Exact commands for each OS are on this page.
Is CVE-2024-1724 being exploited?
CVE-2024-1724 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-1724 affect?
CVE-2024-1724 affects snapd. Severity is medium (CVSS 6.3). In snapd versions prior to 2.62, when using AppArmor for enforcement of sandbox permissions, snapd failed to restrict writes to the $HOME/bin path. In Ubuntu, when this path exists, it is automatically added to the users PATH. An attacker
How urgent is CVE-2024-1724?
Priority 33/100. Public exploit reference
Software pages
Related CVEs
- CVE-2024-5138 HIGH 8.1 UPGRADE The snapctl component within snapd allows a confined snap to interact with the snapd daemon to take certain pr
- CVE-2024-29069 MEDIUM 4.8 UPGRADE In snapd versions prior to 2.62, snapd failed to properly check the destination of symbolic links when extract
- CVE-2024-29068 MEDIUM 5.8 UPGRADE In snapd versions prior to 2.62, snapd failed to properly check the file type when extracting a snap
- CVE-2023-1523 CRITICAL 10.0 UPGRADE MITIGATE Using the TIOCLINUX ioctl request, a malicious snap could inject contents into the input of the controlling te
- CVE-2022-3328 HIGH 7.8 UPGRADE MITIGATE Race condition in snap-confine's must_mkdir_and_open_with_perms()