Summary
Ali Mashally discovered that authd did not properly validate user
identities when matching accounts from identity providers. An attacker
could possibly use this issue to gain access to another user's local
account and files, resulting in unauthorized access to sensitive
information.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 26.10 | authd | 0.7.1 |
Vulnerabilities 1
-
Medium 5.9
authd: Account takeover via username fallback in identity matching after IdP email reassignment
In authd before 0.7.1, the user identity matching in UpdateUser (internal/users/manager.go) resolves an incoming login by the broker-scoped provider ID, but falls back to matching the username when the provider ID does not belong to any known user, and does n…
References
-
report
https://ubuntu.com/security/CVE-2026-102631