https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:07:28 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-338266 EUVD-2026-338266 https://cve.radiocsirt.org/vuln/euvd-2026-338266 https://cve.radiocsirt.org/vuln/fkie_cve-2026-9494 <p>An information disclosure vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools). The client validates Ubuntu Pro APT credentials by executing /usr/lib/apt/apt-helper using the download-file command. During this process, the secret bearer token is embedded directly in the cleartext URL component passed via the command-line arguments (argv), resulting in a URL format such as https://bearer:&lt;token&gt;@esm.ubuntu.com/.../. On systems utilizing a default-mounted /proc file system where process-hiding mitigations (such as hidepid) are disabled, an unprivileged local attacker can monitor system processes and read the sensitive bearer token directly from /proc/cmdline while the helper process is actively running. This leaked token can subsequently be used to gain unauthorized access to the victim&#39;s Ubuntu Pro or Expanded Security Maintenance (ESM) repositories.</p> <p>An information disclosure vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools). The client validates Ubuntu Pro APT credentials by executing /usr/lib/apt/apt-helper using the download-file command. During this process, the secret bearer token is embedded directly in the cleartext URL component passed via the command-line arguments (argv), resulting in a URL format such as https://bearer:&lt;token&gt;@esm.ubuntu.com/.../. On systems utilizing a default-mounted /proc file system where process-hiding mitigations (such as hidepid) are disabled, an unprivileged local attacker can monitor system processes and read the sensitive bearer token directly from /proc/cmdline while the helper process is actively running. This leaked token can subsequently be used to gain unauthorized access to the victim&#39;s Ubuntu Pro or Expanded Security Maintenance (ESM) repositories.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-9494 https://cve.radiocsirt.org/vuln/ghsa-4m5m-x42p-vrwg <p>An information disclosure vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools). The client validates Ubuntu Pro APT credentials by executing /usr/lib/apt/apt-helper using the download-file command. During this process, the secret bearer token is embedded directly in the cleartext URL component passed via the command-line arguments (argv), resulting in a URL format such as https://bearer:&lt;token&gt;@esm.ubuntu.com/.../. On systems utilizing a default-mounted /proc file system where process-hiding mitigations (such as hidepid) are disabled, an unprivileged local attacker can monitor system processes and read the sensitive bearer token directly from /proc/cmdline while the helper process is actively running. This leaked token can subsequently be used to gain unauthorized access to the victim&#39;s Ubuntu Pro or Expanded Security Maintenance (ESM) repositories.</p> <p>An information disclosure vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools). The client validates Ubuntu Pro APT credentials by executing /usr/lib/apt/apt-helper using the download-file command. During this process, the secret bearer token is embedded directly in the cleartext URL component passed via the command-line arguments (argv), resulting in a URL format such as https://bearer:&lt;token&gt;@esm.ubuntu.com/.../. On systems utilizing a default-mounted /proc file system where process-hiding mitigations (such as hidepid) are disabled, an unprivileged local attacker can monitor system processes and read the sensitive bearer token directly from /proc/cmdline while the helper process is actively running. This leaked token can subsequently be used to gain unauthorized access to the victim&#39;s Ubuntu Pro or Expanded Security Maintenance (ESM) repositories.</p> https://cve.radiocsirt.org/vuln/ghsa-4m5m-x42p-vrwg https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-9494 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: ubuntu-advantage-tools, Ubuntu:24.04:LTS: ubuntu-advantage-tools, Ubuntu:25.10: ubuntu-advantage-tools, Ubuntu:26.04:LTS: ubuntu-advantage-tools</p> <p>An information disclosure vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools). The client validates Ubuntu Pro APT credentials by executing /usr/lib/apt/apt-helper using the download-file command. During this process, the secret bearer token is embedded directly in the cleartext URL component passed via the command-line arguments (argv), resulting in a URL format such as https://bearer:&lt;token&gt;@esm.ubuntu.com/.../. On systems utilizing a default-mounted /proc file system where process-hiding mitigations (such as hidepid) are disabled, an unprivileged local attacker can monitor system processes and read the sensitive bearer token directly from /proc/cmdline while the helper process is actively running. This leaked token can subsequently be used to gain unauthorized access to the victim&#39;s Ubuntu Pro or Expanded Security Maintenance (ESM) repositories.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: ubuntu-advantage-tools, Ubuntu:24.04:LTS: ubuntu-advantage-tools, Ubuntu:25.10: ubuntu-advantage-tools, Ubuntu:26.04:LTS: ubuntu-advantage-tools</p> <p>An information disclosure vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools). The client validates Ubuntu Pro APT credentials by executing /usr/lib/apt/apt-helper using the download-file command. During this process, the secret bearer token is embedded directly in the cleartext URL component passed via the command-line arguments (argv), resulting in a URL format such as https://bearer:&lt;token&gt;@esm.ubuntu.com/.../. On systems utilizing a default-mounted /proc file system where process-hiding mitigations (such as hidepid) are disabled, an unprivileged local attacker can monitor system processes and read the sensitive bearer token directly from /proc/cmdline while the helper process is actively running. This leaked token can subsequently be used to gain unauthorized access to the victim&#39;s Ubuntu Pro or Expanded Security Maintenance (ESM) repositories.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-9494 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2393 <p>Ein Angreifer kann mehrere Schwachstellen im ubuntu-pro-client von Ubuntu Linux ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen und vertrauliche Informationen offenzulegen.</p> <p>Ein Angreifer kann mehrere Schwachstellen im ubuntu-pro-client von Ubuntu Linux ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen und vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2393