The vulnerability resides in the REST API for, a universal Linux packaging system that makes an application compatible for various Linux distributions without requiring any modification. The vulnerability was discovered by security researcher Chris Moberly, who privately disclosed it to Canonical, the maker of Ubuntu, late last month. Ubuntu and other major Linux distributions have already rolled out a fixed version of their packages to address the vulnerability, and Linux users are highly recommended to upgrade their vulnerable installations as soon as possible. A local attacker could use this to access privileged socket APIs and obtain administrator privileges.
Source: https://thehackernews.com/2019/02/snapd-linux-privilege-escalation.html