cve.bz

CVE-2026-10720

5.1 mediumEPSS 0.3%

Canonical MicroCeph versions from the squid and tentacle track are vulnerable to a path traversal issue in the remote-import API. Holders of a trusted cluster mTLS certificate (such as enrolled cluster members) or join token can manipulate files in an imported remote cluster within the /var/snap/microceph confinement. This would allow daemon disruption and pollution of the cluster state.

CVSS 4.0
5.1CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:H/SA:H
EPSS
0.3% chance of exploitation in the next 30 days; higher than 22% of CVEs (scores of 2026-10-25)
CWE
CWE-23
Published
Modified
Record from
the NVD, synced

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-xg3j-c7q4-f9phGogithub.com/canonical/microceph/microceph<0.0.0-20260609072127-5c2760d8fb760.0.0-20260609072127-5c2760d8fb76
GO-2026-5755Gogithub.com/canonical/microceph/microceph<0.0.0-20260609072127-5c2760d8fb760.0.0-20260609072127-5c2760d8fb76

References

Check your stackJSON