Home / mailings

PDF

[USN-8957-1] authd vulnerability

Posted on 27 October 2026
Ubuntu Security

==========================================================================Ubuntu Security Notice USN-8957-1
October 27, 2026

authd vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.10

Summary:

authd could allow unauthorized access to another user's files under
certain circumstances.

Software Description:
- authd: Authentication daemon for cloud-based identity provider

Details:

Ali Mashally discovered that authd did not properly validate user
identities when matching accounts from identity providers. An attacker
could possibly use this issue to gain access to another user's local
account and files, resulting in unauthorized access to sensitive
information.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.10
authd 0.7.1

After a standard system update you need to restart authd to make
all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-8957-1
CVE-2026-102631

Package Information:
https://launchpad.net/ubuntu/+source/authd/0.7.1

--===============3870925055508548243==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature

 

TOP