CVE-2026-5774 — Juju API Server Denial of Service and Authentication Replay via Unsynchronized Token Map
Improper synchronization of the userTokens map in the API server in Canonical Juju 4.0.5, 3.6.20, and 2.9.56 may allow an authenticated user to possibly cause a denial of servic…
Published: 2026-04-10 · CVSS: 6.1 · CVSS 4.0
Improper synchronization of the userTokens map in the API server in Canonical Juju 4.0.5, 3.6.20, and 2.9.56 may allow an authenticated user to possibly cause a denial of service on the server or possibly reuse a single-use discharge token.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7