CVE-2026-32691

Name of the Vulnerable Software and Affected Versions Juju versions 3.0.0 through 3.6.18

Description A race condition exists in the secrets management subsystem. An authenticated unit agent can claim ownership of a newly initialized secret between the generation of a Juju Secret ID and the creation of the secret's first revision. This allows an attacker, authenticated as another unit agent, to claim ownership of a known secret and read the content of the initial secret revision.

Recommendations Update to version 3.6.19 or later.