Canonical Maas
4 CVEs affecting Canonical Maas. Latest disclosed: 2025-12-03. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-6107 | Critical | 9.6 | 2025-07-21 | Due to insufficient verification, an attacker could use a malicious client to bypass authentication checks and run RPC commands in a region. This has been addr… |
CVE-2025-7044 | High | 7.7 | 2025-12-03 | An Improper Input Validation vulnerability exists in the user websocket handler of MAAS. An authenticated, unprivileged attacker can intercept a user.update we… |
CVE-2013-1058 | | 2013-11-23 | maas-import-pxe-files in MAAS before 13.10 does not verify the integrity of downloaded files, which allows remote attackers to modify these files via a man-in-… | |
CVE-2013-1057 | | 2013-11-18 | Untrusted search path vulnerability in maas-import-pxe-files in MAAS before 13.10 allows local users to execute arbitrary code via a Trojan horse import_pxe_fi… |