CVE-2025-68153 — MEDIUM (6.5)

Q: How severe is CVE-2025-68153?

CVE-2025-68153 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2025-68153?

Check the references section above for vendor advisories and patch information. Affected products include: Canonical Juju.

Vulnerability Description

Juju is an open source application orchestration engine that enables any application operation on any infrastructure at any scale through special operators called ‘charms’. From versions 2.9 to before 2.9.56 and 3.6 to before 3.6.19, any authenticated user, machine or controller under a Juju controller can modify the resources of an application within the entire controller. This issue has been patched in versions 2.9.56 and 3.6.19.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

HIGH

Availability

NONE

Affected Products

Vendor	Product	Versions
Canonical	Juju	>= 2.9, <= 2.9.55

Related Weaknesses (CWE)

CWE-863

References

FAQ

What is CVE-2025-68153?

CVE-2025-68153 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Juju is an open source application orchestration engine that enables any application operation on any infrastructure at any scale through special operators called ‘charms’. From versions 2.9 to before...

How severe is CVE-2025-68153?

CVE-2025-68153 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-68153?

Check the references section above for vendor advisories and patch information. Affected products include: Canonical Juju.