Canonical Multipass

• CVE-2026-49237 High 7.8 Local Privilege Escalation in Canonical Multipass 0.1%
• CVE-2026-49238 High 8.4 SFTP Server VM Escape in Canonical Multipass 0.5%
• CVE-2025-5199 High 7.3 LPE on Multipass for macOS 0.2%
• CVE-2021-3747 High 8.8 MacOS version of Multipass incorrect owner for application directory 0.2%
• CVE-2021-3626 High 8.8 Windows version of Multipass unauthenticated localhost tcp control socket can perform mounts 0.2%