Go/github.com/canonical/microceph/microceph CVE-2026-10720: medium 5.1, EPSS 0.30%

Canonical MicroCeph: path traversal issue in the remote-import AP

Action: Upgrade github.com/canonical/microceph/microceph to 0.0.0-20260609072127-5c2760d8fb76 or later.

go get github.com/canonical/microceph/microceph@v0.0.0-20260609072127-5c2760d8fb76

Affected

Fixed versions

Sources

• osv: GHSA-xg3j-c7q4-f9ph
• nvd: CVE-2026-10720
• https://github.com/canonical/microceph/pull/758
• https://github.com/canonical/microceph/commit/5c2760d8fb765d670e2673d3a537b67eae4b67c6
• https://github.com/advisories/GHSA-xg3j-c7q4-f9ph
• https://github.com/canonical/microceph

CVE-2026-10720 · published 2026-06-19T06:31:55Z · modified 2026-07-21T15:15:50.716581938Z · JSON