Canonical Maas vulnerabilities

5 vulnerabilities

Known vulnerabilities in Canonical Maas, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.8CVE-2013-1058canonicalmaas+1
EPSS score
1.94%
maas-import-pxe-files in MAAS before 13.10 does not verify the integrity of downloaded files, which allows remote attackers to modify these files via a man-in-the-middle (MITM) attack.4.4CVE-2013-1057canonicalmaas+1
EPSS score
0.59%
Untrusted search path vulnerability in maas-import-pxe-files in MAAS before 13.10 allows local users to execute arbitrary code via a Trojan horse import_pxe_files configuration file in the current working directory.7.7CVE-2025-7044canonicalmaas+1
EPSS score
0.27%
An Improper Input Validation vulnerability exists in the user websocket handler of MAAS. An authenticated, unprivileged attacker can intercept a user.update websocket request and inject the is_superuser property set to true. The server improperly validates this input, allowing the attacker to self-promote to an administrator role. This results in full administrative control over the MAAS deployment.9.8CVE-2024-6107canonicalmaas+2
EPSS score
0.40%
Due to insufficient verification, an attacker could use a malicious client to bypass authentication checks and run RPC commands in a region. This has been addressed in MAAS and updated in the corresponding snaps.5.3CVE-2026-12392canonicalmaas
EPSS score
0.27%
An information exposure vulnerability in Canonical MAAS prior to versions 3.4.10, 3.5.14, 3.6.5, 3.7.3, and 3.8.0 allows an unauthenticated attacker to retrieve the RPC secret in plaintext via the vendor data metadata endpoint. If a target machine was deployed with the 'register as rack' option enabled, an attacker who obtains or infers the machine's system ID can query the preseed/metadata server to leak the secret.