What’s Vulnerable › Vulnerabilities
CVE-2026-6369: Exposed Session Token in canonical-livepatch client snap
- Severity: medium (CVSS 5.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-04-20 · updated 2026-10-26
- Weakness: CWE-306
Description
An improper access control vulnerability in the canonical-livepatch snap client prior to version 10.15.0 allows a local unprivileged user to obtain a sensitive, root-level authentication token by sending an unauthenticated request to the livepatchd.sock Unix domain socket. This vulnerability is exploitable on systems where an administrator has already enabled the Livepatch client with a valid Ubuntu Pro subscription. This token allows an attacker to access Livepatch services using the victim's credentials, as well as potentially cause issues to the Livepatch server.
Affected products
- canonical-livepatch: before 10.15.0 — fixed in 10.15.0
How to fix
Upgrade to a fixed version: canonical-livepatch 10.15.0. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2026-6369 or the next vulnerability affects your stack