Vulnerability in Canonical Authd
CVE-2026-6970
authd prior to version 0.6.4 contains a logic error in primary group ID assignment that can lead to local privilege escalation. When a user's primary group ID (GID) differs from their UID, either because the account was created with authd…
EPSS: 0.001 (1.5th percentile) — read the EPSS interpretation.
Affected products
- Canonical Authd — versions 0.6.0, 0.6.1
Weakness classification (CWE)
References
- security@ubuntu.com (vendor-advisory)
- security@ubuntu.com (patch)