Vulnerability details
CVE-2026-4370
Canonical Juju
Improper TLS Client/Server authentication and certificate verification on Database Cluster
CVSS 3.1
10.0Critical
Official description
A vulnerability was identified in Juju from version 3.2.0 until 3.6.19 and from version 4.0 until 4.0.4, where the internal Dqlite database cluster fails to perform proper TLS client and server authentication. Specifically, the Juju controller's database endpoint does not validate client certificates when a new node attempts to join the cluster. An unauthenticated attacker with network reachability to the Juju controller's Dqlite port can exploit this flaw to join the database cluster. Once joined, the attacker gains full read and write access to the underlying database, allowing for total data compromise.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 10.0Critical | 3.1 | CVEProject cvelistV5 (CNA) (canonical) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Canonical | Juju | 3.2.0 ≤ v < 3.6.20 | CVEProject cvelistV5 (CNA) |
| Canonical | Juju | 4.0 ≤ v < 4.0.4 | CVEProject cvelistV5 (CNA) |
References and advisories
1
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-04-01
- Last updated
- 2026-04-08
- State
- Published
- Assigner (CNA)
- canonical
Exploit prediction (EPSS)
0.38%
Probability of exploitation in 30 days
33%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- Yes
- Exploitation
- Proof of concept
- Technical impact
- Total
Weaknesses (CWE)
- CWE-295Improper certificate validation
- CWE-306Missing authentication for critical function