Executive brief
Juju has Improper TLS Client/Server authentication and certificate verification on Database Cluster in github.com/juju/juju
Affected products
- Go github.com/juju/juju
Junglewise Threat Intelligence
CVE-2026-4370: GO-2026-5405 - Juju has Improper TLS Client/Server authentication and certificate verification on Database Cluster in github.com/juju/juju
CVE-2026-4370 · Severity: low · CVSS 3.1 · Published 2026-06-25
Technologies: github.com/juju/juju (Go). Vendors: Go.
Related threats
- Canonical Juju race condition in API server userTokens map
- Canonical Juju improper authorization in Controller facade
- Canonical Juju incorrect authorization in resource handler
- Canonical Juju Incorrect Authorization in Debug Log Endpoint
- GO-2026-4781 - Juju has unauthorized update of out-of-scope Vault secrets in github.com/juju/juju