CVE-2026-12391

Name of the Vulnerable Software and Affected Versions ubuntu-pro-client (affected versions not specified)

Description An insecure symlink following issue exists within the pro collect-logs command framework. The utility uses predictable temporary file paths or user-accessible log directories to gather diagnostic information without verifying file type or ownership. A local attacker can create a symbolic link (symlink)—a file that points to another file or directory—at a predictable path targeting root-readable files, such as /etc/shadow. When an administrator runs the pro collect-logs command, the tool follows the symlink and includes the contents of the target file in a diagnostic archive. Since the archive is readable by the unprivileged user, this leads to the disclosure of sensitive system secrets.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.