Canonical Authd vulnerabilities

CVE-2024-9313 [HIGH] CVE-2024-9313: Authd PAM module before version 0.3.5 can allow broker-managed users to impersonate any other user m Authd PAM module before version 0.3.5 can allow broker-managed users to impersonate any other user managed by the same broker and perform any PAM operation with it, including authenticating as them.

CVE-2025-5689 [HIGH] CWE-269 CVE-2025-5689: A flaw was found in the temporary user record that authd uses in the pre-auth NSS. As a result, a us A flaw was found in the temporary user record that authd uses in the pre-auth NSS. As a result, a user login for the first time will be considered to be part of the root group in the context of that SSH session.

CVE-2026-6970 [HIGH] CWE-842 CVE-2026-6970: authd prior to version 0.6.4 contains a logic error in primary group ID assignment that can lead to authd prior to version 0.6.4 contains a logic error in primary group ID assignment that can lead to local privilege escalation. When a user's primary group ID (GID) differs from their UID, either because the account was created with authd prior to version 0.5.4 or because the primary group was manually changed via the `authctl group set-gid` command, and

CVE-2024-9312 [MEDIUM] CWE-286 CVE-2024-9312: Authd, through version 0.3.6, did not sufficiently randomize user IDs to prevent collisions. A local Authd, through version 0.3.6, did not sufficiently randomize user IDs to prevent collisions. A local attacker who can register user names could spoof another user's ID and gain their privileges.