CVE-2025-53512: Canonical Juju

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

The /log endpoint on a Juju controller lacked sufficient authorization checks, allowing unauthorized users to access debug messages that could contain sensitive information.

Affected products

• Canonical Juju: before 2.9.52 (fixed in 2.9.52); from 3.0, before 3.6.8 (fixed in 3.6.8)

Published 2025-07-08. Last modified 2026-06-17.