Executive brief
Juju has unauthorized update of out-of-scope Vault secrets in github.com/juju/juju
Affected products
- Go github.com/juju/juju
Junglewise Threat Intelligence
CVE-2026-32692: GO-2026-4781 - Juju has unauthorized update of out-of-scope Vault secrets in github.com/juju/juju
CVE-2026-32692 · Severity: low · CVSS 3.1 · Published 2026-03-23
Technologies: github.com/juju/juju (Go). Vendors: Go.
Related threats
- GO-2026-5405 - Juju has Improper TLS Client/Server authentication and certificate verification on Database Cluster in github.com/juju/juju
- Canonical Juju race condition in API server userTokens map
- Canonical Juju improper authorization in Controller facade
- Canonical Juju incorrect authorization in resource handler
- Canonical Juju Incorrect Authorization in Debug Log Endpoint