CVE-2026-11386

🗓️ 16 Jul 2026 12:16:02Reported by canonicalType

cve🔗 web.nvd.nist.gov👁 151 Views🌐 WEB

Ubuntu pro client input validation flaw enables arbitrary package manager directive injection and root code execution from contract server data.

Reporter	Title	Published	Views	Family All 14
attackerkb	CVE-2026-11386	16 Jul 202612:16	–	attackerkb
Circl	CVE-2026-11386	16 Jul 202613:42	–	circl
Cvelist	CVE-2026-11386 ubuntu-pro-client Input Validation Vulnerability Leading to Arbitrary APT Directive Injection and Remote Code Execution	16 Jul 202612:16	–	cvelist
EUVD	EUVD-2026-44911	16 Jul 202612:16	–	euvd
NVD	CVE-2026-11386	16 Jul 202613:16	–	nvd
OSV	UBUNTU-CVE-2026-11386	17 Jul 202614:00	–	osv
OSV	USN-8555-1 ubuntu-advantage-tools vulnerabilities	16 Jul 202612:59	–	osv
Positive Technologies	PT-2026-60459	16 Jul 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-11386: Improper Input Validation	16 Jul 202600:00	–	rapid7
UbuntuCve	CVE-2026-11386	17 Jul 202614:00	–	ubuntucve

[
  {
    "vendor": "Canonical",
    "product": "ubuntu-pro-client (ubuntu-advantage-tools)",
    "platforms": [
      "Linux"
    ],
    "collectionURL": "https://github.com/canonical/",
    "packageName": "ubuntu-pro-client",
    "repo": "https://github.com/canonical/ubuntu-pro-client",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "37.3",
        "versionType": "python"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Canonical",
    "product": "Ubuntu 26.04 LTS",
    "platforms": [
      "Linux"
    ],
    "collectionURL": "https://launchpad.net/ubuntu/resolute",
    "packageName": "ubuntu-advantage-tools",
    "repo": "https://launchpad.net/ubuntu/+source/ubuntu-advantage-tools",
    "versions": [
      {
        "status": "unaffected",
        "version": "37.2ubuntu0.1",
        "versionType": "dpkg"
      }
    ],
    "defaultStatus": "affected"
  },
  {
    "vendor": "Canonical",
    "product": "Ubuntu 24.04 LTS",
    "platforms": [
      "Linux"
    ],
    "collectionURL": "https://launchpad.net/ubuntu/noble",
    "packageName": "ubuntu-advantage-tools",
    "repo": "https://launchpad.net/ubuntu/+source/ubuntu-advantage-tools",
    "versions": [
      {
        "status": "unaffected",
        "version": "37.2ubuntu~24.04.1",
        "versionType": "dpkg"
      }
    ],
    "defaultStatus": "affected"
  },
  {
    "vendor": "Canonical",
    "product": "Ubuntu 22.04 LTS",
    "platforms": [
      "Linux"
    ],
    "collectionURL": "https://launchpad.net/ubuntu/jammy",
    "packageName": "ubuntu-advantage-tools",
    "repo": "https://launchpad.net/ubuntu/+source/ubuntu-advantage-tools",
    "versions": [
      {
        "status": "unaffected",
        "version": "37.2ubuntu~22.04.1",
        "versionType": "dpkg"
      }
    ],
    "defaultStatus": "affected"
  },
  {
    "vendor": "Canonical",
    "product": "Ubuntu 20.04 LTS",
    "platforms": [
      "Linux"
    ],
    "collectionURL": "https://launchpad.net/ubuntu/focal",
    "packageName": "ubuntu-advantage-tools",
    "repo": "https://launchpad.net/ubuntu/+source/ubuntu-advantage-tools",
    "versions": [
      {
        "status": "unaffected",
        "version": "37.1ubuntu0~20.04.1",
        "versionType": "dpkg"
      }
    ],
    "defaultStatus": "affected"
  },
  {
    "vendor": "Canonical",
    "product": "Ubuntu 18.04 LTS",
    "platforms": [
      "Linux"
    ],
    "collectionURL": "https://launchpad.net/ubuntu/bionic",
    "packageName": "ubuntu-advantage-tools",
    "repo": "https://launchpad.net/ubuntu/+source/ubuntu-advantage-tools",
    "versions": [
      {
        "status": "unaffected",
        "version": "37.1ubuntu0~18.04.1",
        "versionType": "dpkg"
      }
    ],
    "defaultStatus": "affected"
  },
  {
    "vendor": "Canonical",
    "product": "Ubuntu 16.04 LTS",
    "platforms": [
      "Linux"
    ],
    "collectionURL": "https://launchpad.net/ubuntu/xenial",
    "packageName": "ubuntu-advantage-tools",
    "repo": "https://launchpad.net/ubuntu/+source/ubuntu-advantage-tools",
    "versions": [
      {
        "status": "unaffected",
        "version": "37.1ubuntu0~16.04.1",
        "versionType": "dpkg"
      }
    ],
    "defaultStatus": "affected"
  },
  {
    "vendor": "Canonical",
    "product": "Ubuntu 14.04 LTS",
    "platforms": [
      "Linux"
    ],
    "collectionURL": "https://launchpad.net/ubuntu/trusty",
    "packageName": "ubuntu-advantage-tools",
    "repo": "https://launchpad.net/ubuntu/+source/ubuntu-advantage-tools",
    "versions": [
      {
        "status": "unaffected",
        "version": "19.7ubuntu0.1",
        "versionType": "dpkg"
      }
    ],
    "defaultStatus": "affected"
  }
]

Source	Link
ubuntu	www.ubuntu.com/security/CVE-2026-11386

Parameter	Position	Path	Description	CWE
directives.suites	path	/etc/apt/sources.list.d/ubuntu-.list	Input validation/injection in ubuntu-pro-client: contract server data used to generate APT sources via directives.suites[] and directives.aptURL, with unescaped values and newline characters, allowing injection into /etc/apt/sources.list.d/ubuntu-.list and, via additionalPackages, potential arbitrary code execution as root.	CWE-20
directives.aptURL	path	/etc/apt/sources.list.d/ubuntu-.list	Input validation/injection in ubuntu-pro-client: contract server data used to generate APT sources via directives.suites[] and directives.aptURL, with unescaped values and newline characters, allowing injection into /etc/apt/sources.list.d/ubuntu-.list and, via additionalPackages, potential arbitrary code execution as root.	CWE-20
additionalPackages	path	/etc/apt/sources.list.d/ubuntu-.list	Input validation/injection in ubuntu-pro-client: contract server data used to generate APT sources via directives.suites[] and directives.aptURL, with unescaped values and newline characters, allowing injection into /etc/apt/sources.list.d/ubuntu-.list and, via additionalPackages, potential arbitrary code execution as root.	CWE-20

16 Jul 2026 14:16Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.19

EPSS0.00526

SSVC

CWE-20