CVE-2026-6369General(canonical / livepatch_client)

LOWCVSS 5.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An improper access control vulnerability in the canonical-livepatch snap client prior to version 10.15.0 allows a local unprivileged user to obtain a sensitive, root-level authentication token by sending an unauthenticated request to the livepatchd.sock Unix domain socket. This vulnerability is exploitable on systems where an administrator has already enabled the Livepatch client with a valid Ubuntu Pro subscription. This token allows an attacker to access Livepatch services using the victim's credentials, as well as potentially cause issues to the Livepatch server.

canonical CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://discourse.ubuntu.com/t/security-notice-canonical-livepatch-client-snap-vulnerability/80662

Weakness type (CWE)

CWE-306CWE-732

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

livepatch_client

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
General: 1 classified signal
1 total mentions across 1 day

Affected systems

Vendors

canonical

Products

livepatch_client

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

General

1100.0%

Referenced assets2 URLs

By indicator

Full discourse1 post

Vulmon Vulnerability Feed@VulmonFeeds172d
General
CVE-2026-6369 Improper Access Control in Canonical Livepatch Snap Client Before ... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6369 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
The tweet shares a link to a CVE report indicating an improper access control issue in Canonical Livepatch Snap Client, without providing exploit code, patch details, or evidence of active exploitation.
0000040
4.0K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	canonical	livepatch_client	-	-	-

Explore more

Back to dashboard canonical CVEs livepatch_client vulnerabilities