Tlm

Name of the Vulnerable Software and Affected Versions: Juju versions prior to 3.6.8 Juju versions prior to 2.9.52 Description: The issue allows any authenticated controller user to upload arbitrary agent binaries to any model or to the controller itself without verifying model membership or requiring explicit permissions. This enables the distribution of poisoned binaries to new or upgraded machines, potentially resulting in remote code execution. Recommendations: For versions prior to 3.6.8, update to version 3.6.8 or later. For versions prior to 2.9.52, update to version 2.9.52 or later.