{"id":"GHSA-xg3j-c7q4-f9ph","revision":"c4651512bc574bd98974ad5175f2502f","records":[{"revision":"c4651512bc574bd98974ad5175f2502f","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GHSA-xg3j-c7q4-f9ph","aliases":["CVE-2026-10720","GO-2026-5755"],"title":"Canonical MicroCeph: path traversal issue in the remote-import AP","description":"Canonical MicroCeph versions from the squid and tentacle track are vulnerable to a path traversal issue in the remote-import API. Holders of a trusted cluster mTLS certificate (such as enrolled cluster members) or join token can manipulate files in an imported remote cluster within the /var/snap/microceph confinement. This would allow daemon disruption and pollution of the cluster state.","state":0,"publishedAt":"2026-06-19T06:31:55+00:00","modifiedAt":"2026-07-21T15:15:50.7165819+00:00","affected":[{"ecosystem":"Go","name":"github.com/canonical/microceph/microceph","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.0.0-20260609072127-5c2760d8fb76"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[{"system":"CVSS_V4","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:H/SA:H","score":null,"severity":null},{"system":"Publisher rating","vector":null,"score":null,"severity":"MODERATE"}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2026-10720","https://github.com/canonical/microceph/pull/758","https://github.com/canonical/microceph/commit/5c2760d8fb765d670e2673d3a537b67eae4b67c6","https://github.com/advisories/GHSA-xg3j-c7q4-f9ph","https://github.com/canonical/microceph"],"sourceUrl":"https://github.com/advisories/GHSA-xg3j-c7q4-f9ph","license":"GitHub Advisory Database · CC-BY-4.0","key":"osv:GHSA-xg3j-c7q4-f9ph","identifiers":["GHSA-xg3j-c7q4-f9ph","CVE-2026-10720","GO-2026-5755"]},"retained":false,"historicalAffected":[]}],"coverage":[]}