Advisories · Technology

Canonical ubuntu-pro-client (ubuntu-advantage-tools).

Every CVE that names Canonical ubuntu-pro-client (ubuntu-advantage-tools) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-12391 CVE record

CVSS 5.0 Medium

ubuntu-pro-client Local Privilege Escalation and Information Disclosure via Symlink Arbitrary File Read in collect-logs
- Canonical ubuntu-pro-client (ubuntu-advantage-tools)
- Canonical Ubuntu 26.04 LTS
- Path traversal
Not analysed yet 16 Jul 2026
CVE-2026-11386 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

ubuntu-pro-client Input Validation Vulnerability Leading to Arbitrary APT Directive Injection and Remote Code Execution
- Canonical ubuntu-pro-client (ubuntu-advantage-tools)
- Canonical Ubuntu 26.04 LTS
- CWE-20
Not analysed yet 16 Jul 2026
CVE-2026-9494 CVE record

CVSS 5.5 Medium

ubuntu-pro-client Information Disclosure via Cleartext Bearer Token Exposure in Process Command Line
- Canonical ubuntu-pro-client (ubuntu-advantage-tools)
- Canonical Ubuntu 26.04 LTS
- CWE-214
Not analysed yet 16 Jul 2026