← Database

CVE-2024-9312

HIGH CVSS: 7.5 Published: 2024-10-10 Modified: 2026-06-17

Description

Authd, through version 0.3.6, did not sufficiently randomize user IDs to prevent collisions. A local attacker who can register user names could spoof another user's ID and gain their privileges.

Affected Platforms

Canonical Authd

Weakness Type

CWE-286, CWE-335

References