Skip to content
OpenAdvisories

Package · Ubuntu

authd

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.9
    CVE-2026-102631

    authd: Account takeover via username fallback in identity matching after IdP email reassignment

    In authd before 0.7.1, the user identity matching in UpdateUser (internal/users/manager.go) resolves an incoming login by the broker-scoped provider ID, but falls back to matching the username when the provider ID does not belong to any known user, and does n…

    Canonical authd authd Ubuntu
  • High 7.3
    CVE-2026-6970

    authd Denial of Service and Local Privilege Escalation

    authd prior to version 0.6.4 contains a logic error in primary group ID assignment that can lead to local privilege escalation. When a user's primary group ID (GID) differs from their UID, either because the account was created with authd prior to version 0.5…

    Canonical authd authd github.com/canonical/authd Ubuntu Go