Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Canonical — Vulnerabilities & Security Advisories 155

Browse all 155 CVE security advisories affecting Canonical. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Canonical Ltd. primarily develops and maintains Ubuntu, a widely deployed Linux distribution, alongside the OpenStack cloud infrastructure platform and the Snap package management system. Security audits reveal a significant volume of recorded vulnerabilities, currently totaling 107 CVEs, reflecting the extensive codebase and third-party dependencies inherent in these large-scale software ecosystems. Historically, the most prevalent vulnerability classes include remote code execution (RCE), cross-site scripting (XSS), and privilege escalation flaws, often stemming from improper input validation or insecure default configurations within associated services. While no single catastrophic incident has defined the company’s security history, the sheer number of disclosed issues highlights the challenges of maintaining rigorous patch cycles across diverse components. These findings underscore the necessity for continuous monitoring and timely updates for organizations relying on Canonical’s open-source technologies to mitigate potential exploitation risks.

CVE ID Title CVSS Severity Published
CVE-2026-32692 Unauthorized update of out-of-scope Vault secrets — Juju CWE-285 7.6 High 2026-03-18
CVE-2026-32691 Timing ownership claim attack on new external back-end secrets — Juju CWE-708 5.3 Medium 2026-03-18
CVE-2026-28384 Authenticated RCE via unsanitized compression_algorithm — lxd CWE-78 8.8AI High AI 2026-03-12
CVE-2025-13350 Use-after-free of orphaned AF_UNIX in Ubuntu builds of Linux kernel — Ubuntu Linux CWE-416 5.5 - 2026-03-05
CVE-2026-3351 Authorization Bypass in LXD GET /1.0/certificates Endpoint — lxd CWE-862 4.3AI Medium AI 2026-03-03
CVE-2026-1237 Juju 安全漏洞 — juju CWE-672 8.8AI High AI 2026-01-28
CVE-2025-5467 Ubuntu Apport Insecure File Permissions Vulnerability — apport CWE-708 3.3AI Low AI 2025-12-10
CVE-2025-6966 Null-pointer dereference in python-apt TagSection.keys() — python-apt CWE-476 5.5 - 2025-12-05
CVE-2025-54293 Path Traversal in LXD Instance Log File Retrieval — LXD CWE-22 6.5AI Medium AI 2025-10-02
CVE-2025-54292 Client-Side Path Traversal in LXD-UI — LXD CWE-22 8.1AI High AI 2025-10-02
CVE-2025-54291 Project existence disclosure in LXD images API — LXD CWE-209 5.3AI Medium AI 2025-10-02
CVE-2025-54290 Project Existence Disclosure via Error Handling in LXD Image Export — LXD CWE-200 5.3AI Medium AI 2025-10-02
CVE-2025-54289 Privilege Escalation via WebSocket Connection Hijacking in LXD Operations API — LXD CWE-1385 8.8AI High AI 2025-10-02
CVE-2025-54288 Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server — LXD CWE-290 5.1AI Medium AI 2025-10-02
CVE-2025-54287 Arbitrary File Read via Template Injection in Snapshot Patterns — LXD CWE-1336 6.5AI Medium AI 2025-10-02
CVE-2025-54286 CSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI — LXD CWE-352 8.8AI High AI 2025-10-02
CVE-2024-6107 Canonical MAAS 安全漏洞 — MAAS CWE-287 9.6 Critical 2025-07-21
CVE-2025-5199 LPE on Multipass for macOS — Multipass CWE-276 7.3 High 2025-07-11
CVE-2025-0928 Arbitrary executable upload via authenticated endpoint — Juju CWE-285 8.8 High 2025-07-08
CVE-2025-53513 Zip slip vulnerability in Juju — Juju CWE-24 8.8 High 2025-07-08
CVE-2025-53512 Sensitive log retrieval in Juju — Juju CWE-200 6.5 Medium 2025-07-08
CVE-2025-6224 Key leakage in juju/utils certificates — Juju utils CWE-312 6.5 Medium 2025-07-01
CVE-2024-11584 cloud-init 安全漏洞 — cloud-init 5.9 Medium 2025-06-26
CVE-2024-6174 cloud-init 安全漏洞 — cloud-init 8.8 High 2025-06-26
CVE-2025-5689 Improper Permission Management in SSH Session Handling — authd 8.5 High 2025-06-16
CVE-2025-5054 Race Condition in Canonical Apport — Apport CWE-362 4.7 Medium 2025-05-30
CVE-2025-24375 MySQL K8s charm could leak credentials for root-level user `serverconfig` — mysql-k8s-operator CWE-256 5.0 Medium 2025-04-09
CVE-2025-31479 canonical/get-workflow-version-action can leak a partial GITHUB_TOKEN in exception output — get-workflow-version-action CWE-532 8.2 High 2025-04-02
CVE-2024-29069 snapd will follow archived symlinks when unpacking a filesystem — snapd CWE-610 4.8 Medium 2024-07-25
CVE-2024-29068 snapd non-regular file indefinite blocking read — snapd CWE-20 5.8 Medium 2024-07-25

This page lists every published CVE security advisory associated with Canonical. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.