Skip to content
Threat Feed
Subscribe

Product

AppArmor Trinity Profile

1 brief RSS
high advisory

Linux AppArmor Bypass via aa-exec (CVE-2026-46331)

Adversaries can exploit CVE-2026-46331 to bypass AppArmor and unprivileged user namespace restrictions on Linux systems by abusing the `aa-exec` utility with `trinity`, `chrome`, or `flatpak` AppArmor profiles, leading to privilege escalation when the `aa-exec` binary itself is executed from a non-standard path.

AppArmor +4 linux privilege-escalation cve endpoint
1r 1t 1c