PT-2026-60460 · Canonical · Ubuntu-Pro-Client

Mateusz Gierblinski · CVE-2026-12391 · Published 2026-07-16 · Updated 2026-07-17

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ubuntu-pro-client (affected versions not specified)

Description An insecure symlink following issue exists within the pro collect-logs command framework. The utility uses predictable temporary file paths or user-accessible log directories to gather diagnostic information without verifying file type or ownership. A local attacker can create a symbolic link (symlink)—a file that points to another file or directory—at a predictable path targeting root-readable files, such as /etc/shadow. When an administrator runs the pro collect-logs command, the tool follows the symlink and includes the contents of the target file in a diagnostic archive. Since the archive is readable by the unprivileged user, this leads to the disclosure of sensitive system secrets.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2026-12391

USN-8555-1

Affected Products

Ubuntu-Pro-Client

References · 6

• https://cve.org/CVERecord?id=CVE-2026-12391 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-12391 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-12391 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-12391 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8555-1 · Vendor Advisory
• https://twitter.com/MalwareObserver/status/2077759880610435532 · Twitter Post