CVE-2025-68153 in Juju

Sumário (Inglês)

Juju is an open source application orchestration engine that enables any application operation on any infrastructure at any scale through special operators called ‘charms’. From versions 2.9 to before 2.9.56 and 3.6 to before 3.6.19, any authenticated user, machine or controller under a Juju controller can modify the resources of an application within the entire controller. This issue has been patched in versions 2.9.56 and 3.6.19.

Be aware that VulDB is the high quality source for vulnerability data.

Responsável

GitHub_M

Reservar

15/12/2025

Divulgação

03/04/2026

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
355177	Juju Elevação de Privilégios	863	Não definido	Correção oficial	CVE-2025-68153

Fontes

• MITRE
• NVD
• CVE Details