Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A race condition in the secrets management subsystem of Juju versions 3.0.0 through 3.6.18 allows an authenticated unit agent to claim ownership of a newly initialized secret. Between generating a Juju Secret ID and creating the secret's first revision, an attacker authenticated as another unit agent can claim ownership of a known secret. This leads to the attacking unit being able to read the content of the initial secret revision.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-32691 A race condition in the secrets management subsystem of Juju versions 3.0.0 through 3.6.18 allows an authenticated unit agent to claim ownership of a newly initialize… https://www.cve.org/CVERecord?id=CVE-2026-32691
Post summary
The CVE details a race condition in Juju 3.x that permits authenticated unit agents to claim ownership of newly initialized secrets.
CVE-2026-32691 Race Condition in Juju Secrets Management Enabling Unauthorized Secret Access https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-32691
Post summary
The text discloses a race condition vulnerability in Juju Secrets Management that could allow unauthorized secret access.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | canonical | juju | - | - | - |