Go/github.com/canonical/microceph/microceph CVE-2026-10720: unknown, EPSS 0.30%

Canonical MicroCeph: path traversal issue in the remote-import AP in github.com/canonical/microceph/microceph

Action: Upgrade github.com/canonical/microceph/microceph to 0.0.0-20260609072127-5c2760d8fb76 or later.

go get github.com/canonical/microceph/microceph@v0.0.0-20260609072127-5c2760d8fb76

Affected

Fixed versions

Sources

• osv: GO-2026-5755
• https://github.com/advisories/GHSA-xg3j-c7q4-f9ph
• https://nvd.nist.gov/vuln/detail/CVE-2026-10720
• https://github.com/canonical/microceph/commit/5c2760d8fb765d670e2673d3a537b67eae4b67c6
• https://github.com/canonical/microceph/pull/758

CVE-2026-10720 · published 2026-06-25T22:34:41Z · modified 2026-06-25T23:01:17.178215743Z · JSON