VulnerabilityAnalyzed

CVE-2026-5412

This allows a low-privileged user to access sensitive credentials.

MEDIUM 6.5EPSS 0.45%

Does this matter?

Lower severity and a low EPSS score (0.45%). Track it; it rarely justifies an emergency change on its own.

Description

In Juju versions prior to 2.9.57 and 3.6.21, an authorization issue exists in the Controller facade. An authenticated user can call the CloudSpec API method to extract the cloud credentials used to bootstrap the controller. This allows a low-privileged user to access sensitive credentials. This issue is resolved in Juju versions 2.9.57 and 3.6.21.

CVSS 3.1: 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.45% probability · 38th percentile
CISA KEV: Not listed
Weakness: CWE-285
Affected: canonical/juju
Source: security@ubuntu.com

References

https://github.com/juju/juju/pull/22205Issue Tracking, Patch
https://github.com/juju/juju/pull/22206Issue Tracking, Patch
https://github.com/juju/juju/security/advisories/GHSA-w5fq-8965-c969Exploit, Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.