{"id":"USN-8957-1","summary":"authd vulnerability","details":"Ali Mashally discovered that authd did not properly validate user\nidentities when matching accounts from identity providers. An attacker\ncould possibly use this issue to gain access to another user's local\naccount and files, resulting in unauthorized access to sensitive\ninformation.","modified":"2026-10-28T01:13:12.296686384Z","published":"2026-10-27T16:23:37Z","related":["UBUNTU-CVE-2026-102631"],"upstream":["CVE-2026-102631","UBUNTU-CVE-2026-102631"],"references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-8957-1"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-102631"}],"affected":[{"package":{"name":"authd","ecosystem":"Ubuntu:26.10","purl":"pkg:deb/ubuntu/authd?arch=source&distro=stonking"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.1"}]}],"versions":["0.6.1","0.6.1ubuntu0.1","0.7.0"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_version":"0.7.1","binary_name":"authd"}]},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:26.10","cves":[{"severity":[{"score":"CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-102631"}]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8957-1.json"}}],"schema_version":"1.9.2"}