| CVE-2026-93336 |
Missing authorization in the unit resources download route in Canonical Juju 4.0 through 4.0.15 allows a…
|
7.1
High
|
Oct 22, 2026 |
| CVE-2026-5412 |
In Juju versions prior to 2.9.57 and 3.6.21, an authorization issue exists in the Controller facade
|
9.9
Critical
|
Apr 10, 2026 |
| CVE-2026-5774 |
Improper synchronization of the userTokens map in the API server in Canonical Juju 4.0.5, 3.6.20, and 2.9.56 may allow…
|
6.1
Medium
|
Apr 10, 2026 |
| CVE-2026-4370 |
A vulnerability was identified in Juju from version 3.2.0 until 3.6.19 and from version 4.0 until 4.0.4, where the…
|
10.0
Critical
|
Apr 1, 2026 |
| CVE-2026-32694 |
In Juju from version 3.0.0 through 3.6.18, when a secret owner grants permissions to a secret to a grantee, the secret…
|
6.6
Medium
|
Mar 18, 2026 |
| CVE-2026-32693 |
In Juju from version 3.0.0 through 3.6.18, the authorization of the "secret-set" tool is not performed correctly,…
|
8.8
High
|
Mar 18, 2026 |
| CVE-2026-32692 |
An authorization bypass vulnerability in the Vault secrets back-end implementation of Juju versions 3.1.6 through 3.6.18…
|
7.6
High
|
Mar 18, 2026 |
| CVE-2026-32691 |
A race condition in the secrets management subsystem of Juju versions 3.0.0 through 3.6.18 allows an authenticated…
|
5.3
Medium
|
Mar 18, 2026 |
| CVE-2026-1237 |
Vulnerable cross-model authorization in juju
|
2.1
Low
|
Jan 28, 2026 |
| CVE-2025-0928 |
In Juju versions prior to 3.6.8 and 2.9.52, any authenticated controller user was allowed to upload arbitrary agent…
|
8.8
High
|
Jul 8, 2025 |
| CVE-2025-53513 |
The /charms endpoint on a Juju controller lacked sufficient authorization checks, allowing any user with an account on…
|
8.8
High
|
Jul 8, 2025 |
| CVE-2025-53512 |
The /log endpoint on a Juju controller lacked sufficient authorization checks, allowing unauthorized users to access…
|
6.5
Medium
|
Jul 8, 2025 |
| CVE-2024-6984 |
An issue was discovered in Juju that resulted in the leak of the sensitive context ID, which allows a local unprivileged…
|
8.8
High
|
Jul 29, 2024 |