Canonical MAAS

• CVE-2026-12392 Medium 5.3 RPC secret disclosure via vendor data endpoint in Canonical MAAS 0.3%
• CVE-2024-6107 Critical 9.6 Due to insufficient verification, an attacker could use a malicious client to bypass authentication checks and run RPC commands in a region. This has been addressed in MAAS and updated in the correspo 0.4%