7.6
Élevée
CVE-2026-32692 An authorization bypass vulnerability in the Vault secrets back-end implementation of Juju versions 3.1.6 through 3.6.18…
Description
An authorization bypass vulnerability in the Vault secrets back-end implementation of Juju versions 3.1.6 through 3.6.18 allows an authenticated unit agent to perform unauthorized updates to secret revisions. With sufficient information, an attacker can poison any existing secret revision within the scope of that Vault secret back-end.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Juju 3.1 | 3.1.6 → < 3.6.19 | 3.6.19 |
Références
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Juju
Les 13 CVE de Juju →
CVE-2026-93336
Missing authorization in the unit resources download route in Canonical Juju 4.0 through 4.0.15 allows a…
7.1
Élevée
CVE-2026-5412
In Juju versions prior to 2.9.57 and 3.6.21, an authorization issue exists in the Controller facade
9.9
Critique
CVE-2026-5774
Improper synchronization of the userTokens map in the API server in Canonical Juju 4.0.5, 3.6.20, and 2.9.56 may allow…
6.1
Moyenne
CVE-2026-4370
A vulnerability was identified in Juju from version 3.2.0 until 3.6.19 and from version 4.0 until 4.0.4, where the…
10.0
Critique