Canonical Ubuntu-Pro-Client vulnerabilities

CVE-2026-11386 [CRITICAL] CWE-20 CVE-2026-11386: An input validation and injection vulnerability exists in Canonical ubuntu-pro-client (formerly ubun An input validation and injection vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools). The client constructs APT source files (such as /etc/apt/sources.list.d/ubuntu-.list or their DEB822 equivalents) using data received directly from the contract server response via the directives.suites[] and directives.aptURL fi

CVE-2026-9494 [MEDIUM] CWE-214 CVE-2026-9494: An information disclosure vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advan An information disclosure vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools). The client validates Ubuntu Pro APT credentials by executing /usr/lib/apt/apt-helper using the download-file command. During this process, the secret bearer token is embedded directly in the cleartext URL component passed via the command-li

CVE-2026-12391 [MEDIUM] CWE-59 CVE-2026-12391: An insecure symlink following vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-a An insecure symlink following vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools) within the pro collect-logs command framework. The utility creates or utilizes predictable temporary file paths or user-accessible log directories when gathering diagnostic information without verifying the file type or ownership. An un