Skip to content
OpenAdvisories

Package · Ubuntu

ubuntu-advantage-tools

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.0
    CVE-2026-12391

    ubuntu-pro-client Local Privilege Escalation and Information Disclosure via Symlink Arbitrary File Read in collect-logs

    An insecure symlink following vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools) within the pro collect-logs command framework. The utility creates or utilizes predictable temporary file paths or user-accessible log director…

    Canonical Ubuntu 24.04 LTS Ubuntu 22.04 LTS Ubuntu 20.04 LTS Ubuntu
  • Medium 5.5
    CVE-2026-9494

    ubuntu-pro-client Information Disclosure via Cleartext Bearer Token Exposure in Process Command Line

    An information disclosure vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools). The client validates Ubuntu Pro APT credentials by executing /usr/lib/apt/apt-helper using the download-file command. During this process, the sec…

    Canonical Ubuntu 22.04 LTS Ubuntu 24.04 LTS Ubuntu 26.04 LTS Ubuntu