Medium severity · published Jun 19, 2026
CVE-2026-10720
MicroCeph path traversal issue in the remote-import API
5.1
CVSS
0.3%
EPSS
No
On KEV
Description
Canonical MicroCeph versions from the squid and tentacle track are vulnerable to a path traversal issue in the remote-import API. Holders of a trusted cluster mTLS certificate (such as enrolled cluster members) or join token can manipulate files in an imported remote cluster within the /var/snap/microceph confinement. This would allow daemon disruption and pollution of the cluster state.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 22% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MI
Microceph · Canonical
19.2.1+snap74c0060321 before 19.2.3+snapcf306793a4; 20.0.0 before 20.2.0+snapbe4e67380e · source: vendor