PT-2026-26056 · Canonical · Juju

Harry Pidcock · Publicado 2026-03-18 · Atualizado 2026-03-27 · CVE-2026-32692

Positive Technologies (AI Summary)

CVSS v3.1

7.6

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L

Name of the Vulnerable Software and Affected Versions Juju versions 3.1.6 through 3.6.18

Description An authorization bypass exists in the Vault secrets back-end implementation. An authenticated unit agent can perform unauthorized updates to secret revisions. An attacker, with sufficient information, can potentially compromise existing secret revisions within the scope of the affected Vault secret back-end.

Recommendations Update Juju to version 3.6.19 or later.

Correção

Improper Authorization

Enumeração de Fraquezas

CWE-285

Identificadores relacionados

CVE-2026-32692

GHSA-89X7-5M5M-MCMM

GO-2026-4781

SUSE-SU-2026:1135-1

Produtos afetados

Juju

Referências · 148

• https://github.com/juju/juju · Nota
• https://github.com/juju/juju/security/advisories/GHSA-89x7-5m5m-mcmm · Aviso do Fabricante
• https://github.com/juju/juju/commit/d06919eb03ec68156818bcc304b5fe1c39a8f9e9 · Nota
• https://suse.com/security/cve/CVE-2026-32828 · Nota
• https://suse.com/security/cve/CVE-2026-32691 · Nota
• https://suse.com/security/cve/CVE-2026-33680 · Nota
• https://suse.com/security/cve/CVE-2026-22545 · Nota
• https://suse.com/security/cve/CVE-2026-32811 · Nota
• https://suse.com/security/cve/CVE-2026-32254 · Nota
• https://suse.com/security/cve/CVE-2026-33191 · Nota
• https://suse.com/security/cve/CVE-2026-33194 · Nota
• https://suse.com/security/cve/CVE-2026-33203 · Nota
• https://suse.com/security/cve/CVE-2026-33729 · Nota
• https://suse.com/security/cve/CVE-2026-32747 · Nota
• https://suse.com/security/cve/CVE-2026-33066 · Nota