Skip to content
OpenAdvisories

Package · Ubuntu

authd

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2026-102631

    authd: Account takeover via username fallback in identity matching after IdP email reassignment

    In authd before 0.7.1, the user identity matching in UpdateUser (internal/users/manager.go) resolves an incoming login by the broker-scoped provider ID, but falls back to matching the username when the provider ID does not belong to any known user, and does n…

    Canonical authd authd Ubuntu