Skip to content
OpenAdvisories

Product · Ubuntu

MAAS

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.7
    CVE-2025-7044

    Privilege Escalation in MAAS via Websocket Request Manipulation

    An Improper Input Validation vulnerability exists in the user websocket handler of MAAS. An authenticated, unprivileged attacker can intercept a user.update websocket request and inject the is_superuser property set to true. The server improperly validates th…

    Ubuntu MAAS
  • High 8.6
    CVE-2014-1426

    get_file_by_name does not check owner

    A vulnerability in maasserver.api.get_file_by_name of Ubuntu MAAS allows unauthenticated network clients to download any file. This issue affects: Ubuntu MAAS versions prior to 1.9.2.

    Ubuntu MAAS