Canonical Ubuntu Pro for WSL up to 0.1.19ubuntu1 Service information disclosure

Summaryinfo

A vulnerability was found in Canonical Ubuntu Pro for WSL up to 0.1.19ubuntu1. It has been classified as problematic. This impacts an unknown function of the component Service. This manipulation causes information disclosure. The identification of this vulnerability is CVE-2026-102371. The attack can only be executed locally. There is no exploit available. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability classified as problematic was found in Canonical Ubuntu Pro for WSL up to 0.1.19ubuntu1. Affected by this vulnerability is an unknown code block of the component Service. The manipulation with an unknown input leads to a information disclosure vulnerability. The CWE definition for the vulnerability is CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. As an impact it is known to affect confidentiality. The summary by CVE is:

In wsl-pro-service before 0.1.19ubuntu3, the service component which runs as root inside each WSL instance attaches the instance to Ubuntu Pro by executing the pro client with the Ubuntu Pro token passed as a command-line argument (pro attach <token>). On systems where /proc is mounted without process-hiding mitigations (such as hidepid), which is the default in WSL, an unprivileged local user or process in the same WSL instance can read the token from /proc/<pid>/cmdline while the attach process is running. The leaked token could then be used to attach other machines to the victim's Ubuntu Pro subscription and gain unauthorized access to Ubuntu Pro services.

The advisory is shared at github.com. This vulnerability is known as CVE-2026-102371 since 09/29/2026. The exploitation appears to be easy. An attack has to be approached locally. Neither technical details nor an exploit are publicly available. MITRE ATT&CK project uses the attack technique T1592 for this issue.

Upgrading to version 0.1.18~20.04.2, 0.1.18~22.04.2, 0.1.18~24.04.3 or 0.1.19ubuntu2 eliminates this vulnerability.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Vendor

• Canonical

Name

• Ubuntu Pro for WSL

Version

• 0.1.19ubuntu1

License

• open-source

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion