Resource Modification Vulnerability in Juju by Canonical

CVE-2025-68153

What is CVE-2025-68153?

Juju, an open source application orchestration engine by Canonical, has a resource modification vulnerability that allows any authenticated user, machine, or controller operating under a Juju controller to alter application resources across the entire controller. This issue affects Juju versions 2.9 (prior to 2.9.56) and 3.6 (prior to 3.6.19) and has been addressed in subsequent versions. Users are strongly advised to update to the patched releases to mitigate the potential impact.

References