CVE-2026-32692

—

CVSS 3.1

6.5 medium

EPSS

<1%p6

Published

Mar 18, 2026 (Mar 18, 2026)

Modified

Jun 17, 2026

Description

An authorization bypass vulnerability in the Vault secrets back-end implementation of Juju versions 3.1.6 through 3.6.18 allows an authenticated unit agent to perform unauthorized updates to secret revisions. With sufficient information, an attacker can poison any existing secret revision within the scope of that Vault secret back-end.

Vendors: canonical
Products: juju
Weakness: CWE-285
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.