Vulnerability · Published Jun 19, 2026 · Assigned by canonical
CVE-2026-10720MicroCeph path traversal issue in the remote-import API
Medium 5.1
In plain English
A medium-severity security flaw in Microceph from Canonical. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
Canonical MicroCeph versions from the squid and tentacle track are vulnerable to a path traversal issue in the remote-import API. Holders of a trusted cluster mTLS certificate (such as enrolled cluster members) or join token can manipulate files in an imported remote cluster within the /var/snap/microceph confinement. This would allow daemon disruption and pollution of the cluster state.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Go | github.com/canonical/microceph/microceph | 0.0.0-20260609072127-5c2760d8fb76 | GHSA-xg3j-c7q4-f9ph |
| Go | github.com/canonical/microceph/microceph | 0.0.0-20260609072127-5c2760d8fb76 | GO-2026-5755 |
Affected products (as reported)
Weakness: CWE-23 · Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:H/SA:H