CVE-2026-102631 | Canonical authd up to 0.7.0 User Identity Matching manager.go UpdateUser improper authentication

October 15, 2026 Yanac

A vulnerability was found in Canonical authd up to 0.7.0. It has been rated as very critical. The impacted element is the function UpdateUser of the file internal/users/manager.go of the component User Identity Matching. Performing a manipulation results in improper authentication.

This vulnerability is known as CVE-2026-102631. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More