Canonical Multipass is affected by a high-severity vulnerability that could allow for unauthorized access or system manipulation.

The software contains an unspecified security issue that requires further investigation; the specific authentication requirements are currently unknown.

The CVSS score of 8.4 indicates a high risk to environment security. Exploitation of this vulnerability could compromise the host system running Multipass instances, potentially leading to privilege escalation or unauthorized data access within the virtualized environment.

Immediate Action: Check for updates via the official Canonical Multipass release channels and apply all available security patches.

Proactive Monitoring: Audit virtual machine configuration changes and monitor host-level system logs for signs of unauthorized access or process execution.

Compensating Controls: Ensure that Multipass instances are run with the principle of least privilege and that host systems are hardened against unauthorized container or VM breakout attempts.

Public Exploit Available: false

Security teams should treat this vulnerability as a priority due to the high CVSS score. Ensure all instances of Multipass are accounted for in your asset inventory and apply the vendor-provided patches as soon as they become available.