Incorrect caching of authentication data between different users in the qSnapper D‑Bus service before version 1.3.3 enables a local attacker to invoke D‑Bus functions after a privileged user has authenticated. This vulnerability allows unauthorized users to bypass the proper authentication checks, giving them the ability to call privileged functions that were intended for the original authenticated user. The impact is that a local attacker can gain unauthorized access to the service’s privileged operations, effectively escalating privileges within the context of the qSnapper service.

Products affected are qSnapper, specifically the D‑Bus component provided by the vendor presire. All releases prior to version 1.3.3 are vulnerable. Versions claiming to use the D‑Bus interface before that release lack the necessary authentication isolation.

The CVSS score of 8.4 indicates a high severity vulnerability. EPSS 0.00134 (0.13%) indicates a very low probability of exploitation, and the vulnerability is not listed in CISA’s KEV catalog. The threat vector is local privilege, requiring a trusted process to authenticate first; once that occurs the caching flaw allows another local user to reuse the authentication token. Because it requires local access and no network exposure, the attack is limited to machines where both privileged and unprivileged users operate, yet the potential for privilege escalation within the qSnapper service remains significant.