CVE-2026-32692 — Unauthorized update of out-of-scope Vault secrets

CVE-2026-32692

Unauthorized update of out-of-scope Vault secrets PUBLISHED

Description (CNA)

An authorization bypass vulnerability in the Vault secrets back-end implementation of Juju versions 3.1.6 through 3.6.18 allows an authenticated unit agent to perform unauthorized updates to secret revisions. With sufficient information, an attacker can poison any existing secret revision within the scope of that Vault secret back-end.

Affected (CNA)

Vendor / product	Versions
Canonical / Juju	affected 3.1.6 before 3.6.19

CWE

CWE-285

References

https://github.com/juju/juju/security/advisories/GHSA-89x7-5m5m-mcmm

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.