Vulnerability · Published Apr 20, 2026 · Assigned by canonical
CVE-2026-6369Exposed Session Token in canonical-livepatch client snap
Medium 5.7
In plain English
A medium-severity missing authentication in canonical-livepatch from Canonical. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 2% of all known vulnerabilities).
Official description
An improper access control vulnerability in the canonical-livepatch snap client prior to version 10.15.0 allows a local unprivileged user to obtain a sensitive, root-level authentication token by sending an unauthenticated request to the livepatchd.sock Unix domain socket. This vulnerability is exploitable on systems where an administrator has already enabled the Livepatch client with a valid Ubuntu Pro subscription. This token allows an attacker to access Livepatch services using the victim's credentials, as well as potentially cause issues to the Livepatch server.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Canonical | canonical-livepatch | 0 – before 10.15.0 |
Weakness: CWE-306, CWE-732 · Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:L/SA:L