{
  "cveId": "CVE-2026-9494",
  "url": "https://patchblox.com/security/cve/CVE-2026-9494",
  "summary": "CVE-2026-9494 is fixed in 5 products on 1 platform, first by ubuntu-advantage-pro 37.2ubuntu0.1, released July 17, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "ubuntu-advantage-pro: An information disclosure vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools)",
  "description": "An information disclosure vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools). The client validates Ubuntu Pro APT credentials by executing /usr/lib/apt/apt-helper using the download-file command. During this process, the secret bearer token is embedded directly in the cleartext URL component passed via the command-line arguments (argv), resulting in a URL format such as https://bearer:\u0026lt;token\u0026gt;@esm.ubuntu.com/.../. On systems utilizing a default-mounted /proc file system where process-hiding mitigations (such as hidepid) are disabled, an unprivileged local attacker can monitor system processes and read the sensitive bearer token directly from /proc/cmdline while the helper process is actively running. This leaked token can subsequently be used to gain unauthorized access to the victim\u0027s Ubuntu Pro or Expanded Security Maintenance (ESM) repositories.",
  "published": "2026-07-17T07:00:00Z",
  "severity": "Medium",
  "epss": 0.00146,
  "epssPercentile": 0.03874,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "ubuntu-advantage-pro",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "37.2ubuntu~22.04.1",
      "fix": "ubuntu-advantage-pro 37.2ubuntu~22.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-ubuntu-advantage-pro-37.2ubuntu-22.04.1",
      "released": "2026-07-18T12:43:06Z"
    },
    {
      "platform": "linux",
      "product": "ubuntu-advantage-pro",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "37.2ubuntu~24.04.1",
      "fix": "ubuntu-advantage-pro 37.2ubuntu~24.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-ubuntu-advantage-pro-37.2ubuntu-24.04.1",
      "released": "2026-07-18T12:43:09Z"
    },
    {
      "platform": "linux",
      "product": "ubuntu-advantage-pro",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "37.2ubuntu0.1",
      "fix": "ubuntu-advantage-pro 37.2ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-ubuntu-advantage-pro-37.2ubuntu0.1",
      "released": "2026-07-17T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "ubuntu-advantage-tools",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "37.2ubuntu~22.04.1",
      "fix": "ubuntu-advantage-tools 37.2ubuntu~22.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-ubuntu-advantage-tools-37.2ubuntu-22.04.1",
      "released": "2026-07-18T12:43:06Z"
    },
    {
      "platform": "linux",
      "product": "ubuntu-advantage-tools",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "37.2ubuntu~24.04.1",
      "fix": "ubuntu-advantage-tools 37.2ubuntu~24.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-ubuntu-advantage-tools-37.2ubuntu-24.04.1",
      "released": "2026-07-18T12:43:09Z"
    },
    {
      "platform": "linux",
      "product": "ubuntu-advantage-tools",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "37.2ubuntu0.1",
      "fix": "ubuntu-advantage-tools 37.2ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-ubuntu-advantage-tools-37.2ubuntu0.1",
      "released": "2026-07-17T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "ubuntu-pro-auto-attach",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "37.2ubuntu~22.04.1",
      "fix": "ubuntu-pro-auto-attach 37.2ubuntu~22.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-ubuntu-pro-auto-attach-37.2ubuntu-22.04.1",
      "released": "2026-07-18T12:43:06Z"
    },
    {
      "platform": "linux",
      "product": "ubuntu-pro-auto-attach",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "37.2ubuntu~24.04.1",
      "fix": "ubuntu-pro-auto-attach 37.2ubuntu~24.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-ubuntu-pro-auto-attach-37.2ubuntu-24.04.1",
      "released": "2026-07-18T12:43:09Z"
    },
    {
      "platform": "linux",
      "product": "ubuntu-pro-auto-attach",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "37.2ubuntu0.1",
      "fix": "ubuntu-pro-auto-attach 37.2ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-ubuntu-pro-auto-attach-37.2ubuntu0.1",
      "released": "2026-07-17T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "ubuntu-pro-client",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "37.2ubuntu~22.04.1",
      "fix": "ubuntu-pro-client 37.2ubuntu~22.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-ubuntu-pro-client-37.2ubuntu-22.04.1",
      "released": "2026-07-18T12:43:06Z"
    },
    {
      "platform": "linux",
      "product": "ubuntu-pro-client",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "37.2ubuntu~24.04.1",
      "fix": "ubuntu-pro-client 37.2ubuntu~24.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-ubuntu-pro-client-37.2ubuntu-24.04.1",
      "released": "2026-07-18T12:43:09Z"
    },
    {
      "platform": "linux",
      "product": "ubuntu-pro-client",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "37.2ubuntu0.1",
      "fix": "ubuntu-pro-client 37.2ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-ubuntu-pro-client-37.2ubuntu0.1",
      "released": "2026-07-17T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "ubuntu-pro-client-l10n",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "37.2ubuntu~22.04.1",
      "fix": "ubuntu-pro-client-l10n 37.2ubuntu~22.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-ubuntu-pro-client-l10n-37.2ubuntu-22.04.1",
      "released": "2026-07-18T12:43:06Z"
    },
    {
      "platform": "linux",
      "product": "ubuntu-pro-client-l10n",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "37.2ubuntu~24.04.1",
      "fix": "ubuntu-pro-client-l10n 37.2ubuntu~24.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-ubuntu-pro-client-l10n-37.2ubuntu-24.04.1",
      "released": "2026-07-18T12:43:09Z"
    },
    {
      "platform": "linux",
      "product": "ubuntu-pro-client-l10n",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "37.2ubuntu0.1",
      "fix": "ubuntu-pro-client-l10n 37.2ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-ubuntu-pro-client-l10n-37.2ubuntu0.1",
      "released": "2026-07-17T07:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}