CVE-2026-6369: Canonical Livepatch Client

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

An improper access control vulnerability in the canonical-livepatch snap client prior to version 10.15.0 allows a local unprivileged user to obtain a sensitive, root-level authentication token by sending an unauthenticated request to the livepatchd.sock Unix domain socket. This vulnerability is exploitable on systems where an administrator has already enabled the Livepatch client with a valid Ubuntu Pro subscription. This token allows an attacker to access Livepatch services using the victim's credentials, as well as potentially cause issues to the Livepatch server.

Affected products

• Canonical Livepatch Client: before 10.15.0 (fixed in 10.15.0)

Published 2026-04-20. Last modified 2026-06-17.