CVE-2026-10720: Canonical Microceph

Medium severity, CVSS 5.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Canonical MicroCeph versions from the squid and tentacle track are vulnerable to a path traversal issue in the remote-import API. Holders of a trusted cluster mTLS certificate (such as enrolled cluster members) or join token can manipulate files in an imported remote cluster within the /var/snap/microceph confinement. This would allow daemon disruption and pollution of the cluster state.

Affected products

• Canonical Microceph: from 19.2.1+snap74c0060321, before 19.2.3+snapcf306793a4 (fixed in 19.2.3+snapcf306793a4); from 20.0.0, before 20.2.0+snapbe4e67380e (fixed in 20.2.0+snapbe4e67380e)

Published 2026-06-19. Last modified 2026-06-22.