Skip to content
OpenAdvisories

Package · Ubuntu

ubuntu-advantage-tools

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.0
    CVE-2026-11386

    ubuntu-pro-client Input Validation Vulnerability Leading to Arbitrary APT Directive Injection and Remote Code Execution

    An input validation and injection vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools). The client constructs APT source files (such as /etc/apt/sources.list.d/ubuntu-.list or their DEB822 equivalents) using data received dire…

    Canonical Ubuntu 22.04 LTS Ubuntu 24.04 LTS Ubuntu 26.04 LTS Ubuntu