Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Juju is an open source application orchestration engine that enables any application operation on any infrastructure at any scale through special operators called ‘charms’. From versions 2.9 to before 2.9.56 and 3.6 to before 3.6.19, it is possible that a compromised workload machine under a Juju controller can read any log file for any entity in any model at any level. This issue has been patched in versions 2.9.56 and 3.6.19.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2025-68152 Juju is an open source application orchestration engine that enables any application operation on any infrastructure at any scale through special operators called ‘ch… https://www.cve.org/CVERecord?id=CVE-2025-68152
Post summary
The snippet merely references CVE-2025-68152 in the context of the Juju application orchestrator with a link to the official CVE record, lacking actionable or detailed information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | canonical | juju | - | - | - |