CVE-2026-32692
HIGH
canonical
NVD
CVSS Score
7.6
Severity
HIGH
Published
Mar 18, 2026
Vendor
canonical
Description
An authorization bypass vulnerability in the Vault secrets back-end implementation of Juju versions 3.1.6 through 3.6.18 allows an authenticated unit agent to perform unauthorized updates to secret revisions. With sufficient information, an attacker can poison any existing secret revision within the scope of that Vault secret back-end.