{
  "document": {
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "TuxCare License Agreement",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://tuxcare.com/contact/",
      "name": "TuxCare",
      "namespace": "https://tuxcare.com/"
    },
    "references": [
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.tuxcare.com/csaf/v2/els_os/ubuntu18.04els/vex/2026/cve-2026-9494-els_os-ubuntu18_04els.json"
      }
    ],
    "tracking": {
      "current_release_date": "2026-07-17T14:56:50Z",
      "generator": {
        "date": "2026-07-17T14:56:50Z",
        "engine": {
          "name": "pyCSAF"
        }
      },
      "id": "CVE-2026-9494-ELS_OS-UBUNTU18.04ELS",
      "initial_release_date": "2026-07-16T13:16:00Z",
      "revision_history": [
        {
          "date": "2026-07-16T13:16:00Z",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-07-17T14:56:50Z",
          "number": "2",
          "summary": "Official Publication"
        }
      ],
      "status": "final",
      "version": "2"
    },
    "title": "Security update on CVE-2026-9494"
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Ubuntu 18.04",
                "product": {
                  "name": "Ubuntu 18.04",
                  "product_id": "Ubuntu-18",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Ubuntu"
          }
        ],
        "category": "vendor",
        "name": "Canonical Ltd."
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ubuntu-advantage-tools-1:29.4~18.04+tuxcare.els1.amd64",
                "product": {
                  "name": "ubuntu-advantage-tools-1:29.4~18.04+tuxcare.els1.amd64",
                  "product_id": "ubuntu-advantage-tools-1:29.4~18.04+tuxcare.els1.amd64",
                  "product_identification_helper": {
                    "purl": "pkg:deb/cloudlinux/ubuntu-advantage-tools@1:29.4~18.04%2Btuxcare.els1?arch=amd64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ubuntu-pro-client-1:32.3~18.04+tuxcare.els1.amd64",
                "product": {
                  "name": "ubuntu-pro-client-1:32.3~18.04+tuxcare.els1.amd64",
                  "product_id": "ubuntu-pro-client-1:32.3~18.04+tuxcare.els1.amd64",
                  "product_identification_helper": {
                    "purl": "pkg:deb/cloudlinux/ubuntu-pro-client@1:32.3~18.04%2Btuxcare.els1?arch=amd64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ubuntu-pro-client-l10n-1:32.3~18.04+tuxcare.els1.amd64",
                "product": {
                  "name": "ubuntu-pro-client-l10n-1:32.3~18.04+tuxcare.els1.amd64",
                  "product_id": "ubuntu-pro-client-l10n-1:32.3~18.04+tuxcare.els1.amd64",
                  "product_identification_helper": {
                    "purl": "pkg:deb/cloudlinux/ubuntu-pro-client-l10n@1:32.3~18.04%2Btuxcare.els1?arch=amd64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ubuntu-advantage-tools-1:32.3~18.04+tuxcare.els1.all",
                "product": {
                  "name": "ubuntu-advantage-tools-1:32.3~18.04+tuxcare.els1.all",
                  "product_id": "ubuntu-advantage-tools-1:32.3~18.04+tuxcare.els1.all",
                  "product_identification_helper": {
                    "purl": "pkg:deb/cloudlinux/ubuntu-advantage-tools@1:32.3~18.04%2Btuxcare.els1?arch=all"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ubuntu-pro-auto-attach-1:32.3~18.04+tuxcare.els1.all",
                "product": {
                  "name": "ubuntu-pro-auto-attach-1:32.3~18.04+tuxcare.els1.all",
                  "product_id": "ubuntu-pro-auto-attach-1:32.3~18.04+tuxcare.els1.all",
                  "product_identification_helper": {
                    "purl": "pkg:deb/cloudlinux/ubuntu-pro-auto-attach@1:32.3~18.04%2Btuxcare.els1?arch=all"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ubuntu-advantage-pro-1:29.4~18.04+tuxcare.els1.all",
                "product": {
                  "name": "ubuntu-advantage-pro-1:29.4~18.04+tuxcare.els1.all",
                  "product_id": "ubuntu-advantage-pro-1:29.4~18.04+tuxcare.els1.all",
                  "product_identification_helper": {
                    "purl": "pkg:deb/cloudlinux/ubuntu-advantage-pro@1:29.4~18.04%2Btuxcare.els1?arch=all"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ubuntu-advantage-pro-1:32.3~18.04+tuxcare.els1.all",
                "product": {
                  "name": "ubuntu-advantage-pro-1:32.3~18.04+tuxcare.els1.all",
                  "product_id": "ubuntu-advantage-pro-1:32.3~18.04+tuxcare.els1.all",
                  "product_identification_helper": {
                    "purl": "pkg:deb/cloudlinux/ubuntu-advantage-pro@1:32.3~18.04%2Btuxcare.els1?arch=all"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "all"
          }
        ],
        "category": "vendor",
        "name": "CloudLinux"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ubuntu-advantage-tools-1:29.4~18.04+tuxcare.els1.amd64 as a component of Ubuntu 18.04",
          "product_id": "Ubuntu-18:ubuntu-advantage-tools-1:29.4~18.04+tuxcare.els1.amd64"
        },
        "product_reference": "ubuntu-advantage-tools-1:29.4~18.04+tuxcare.els1.amd64",
        "relates_to_product_reference": "Ubuntu-18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ubuntu-advantage-tools-1:32.3~18.04+tuxcare.els1.all as a component of Ubuntu 18.04",
          "product_id": "Ubuntu-18:ubuntu-advantage-tools-1:32.3~18.04+tuxcare.els1.all"
        },
        "product_reference": "ubuntu-advantage-tools-1:32.3~18.04+tuxcare.els1.all",
        "relates_to_product_reference": "Ubuntu-18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ubuntu-pro-client-1:32.3~18.04+tuxcare.els1.amd64 as a component of Ubuntu 18.04",
          "product_id": "Ubuntu-18:ubuntu-pro-client-1:32.3~18.04+tuxcare.els1.amd64"
        },
        "product_reference": "ubuntu-pro-client-1:32.3~18.04+tuxcare.els1.amd64",
        "relates_to_product_reference": "Ubuntu-18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ubuntu-pro-auto-attach-1:32.3~18.04+tuxcare.els1.all as a component of Ubuntu 18.04",
          "product_id": "Ubuntu-18:ubuntu-pro-auto-attach-1:32.3~18.04+tuxcare.els1.all"
        },
        "product_reference": "ubuntu-pro-auto-attach-1:32.3~18.04+tuxcare.els1.all",
        "relates_to_product_reference": "Ubuntu-18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ubuntu-advantage-pro-1:29.4~18.04+tuxcare.els1.all as a component of Ubuntu 18.04",
          "product_id": "Ubuntu-18:ubuntu-advantage-pro-1:29.4~18.04+tuxcare.els1.all"
        },
        "product_reference": "ubuntu-advantage-pro-1:29.4~18.04+tuxcare.els1.all",
        "relates_to_product_reference": "Ubuntu-18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ubuntu-advantage-pro-1:32.3~18.04+tuxcare.els1.all as a component of Ubuntu 18.04",
          "product_id": "Ubuntu-18:ubuntu-advantage-pro-1:32.3~18.04+tuxcare.els1.all"
        },
        "product_reference": "ubuntu-advantage-pro-1:32.3~18.04+tuxcare.els1.all",
        "relates_to_product_reference": "Ubuntu-18"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ubuntu-pro-client-l10n-1:32.3~18.04+tuxcare.els1.amd64 as a component of Ubuntu 18.04",
          "product_id": "Ubuntu-18:ubuntu-pro-client-l10n-1:32.3~18.04+tuxcare.els1.amd64"
        },
        "product_reference": "ubuntu-pro-client-l10n-1:32.3~18.04+tuxcare.els1.amd64",
        "relates_to_product_reference": "Ubuntu-18"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-9494",
      "cwe": {
        "id": "CWE-214",
        "name": "Invocation of Process Using Visible Sensitive Information"
      },
      "notes": [
        {
          "category": "description",
          "text": "An information disclosure vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools). The client validates Ubuntu Pro APT credentials by executing /usr/lib/apt/apt-helper using the download-file command. During this process, the secret bearer token is embedded directly in\nthe cleartext URL component passed via the command-line arguments (argv), resulting in a URL format such as https://bearer:<token>@esm.ubuntu.com/.../. On systems utilizing a default-mounted /proc file system where process-hiding mitigations (such as hidepid) are disabled, an unprivileged local attacker can\nmonitor system processes and read the sensitive bearer token directly from /proc/cmdline while the helper process is actively running. This leaked token can subsequently be used to gain unauthorized access to the victim's Ubuntu Pro or Expanded Security Maintenance (ESM) repositories.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "under_investigation": [
          "Ubuntu-18:ubuntu-advantage-pro-1:29.4~18.04+tuxcare.els1.all",
          "Ubuntu-18:ubuntu-advantage-pro-1:32.3~18.04+tuxcare.els1.all",
          "Ubuntu-18:ubuntu-advantage-tools-1:29.4~18.04+tuxcare.els1.amd64",
          "Ubuntu-18:ubuntu-advantage-tools-1:32.3~18.04+tuxcare.els1.all",
          "Ubuntu-18:ubuntu-pro-auto-attach-1:32.3~18.04+tuxcare.els1.all",
          "Ubuntu-18:ubuntu-pro-client-1:32.3~18.04+tuxcare.els1.amd64",
          "Ubuntu-18:ubuntu-pro-client-l10n-1:32.3~18.04+tuxcare.els1.amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-9494"
        },
        {
          "category": "external",
          "summary": "https://ubuntu.com/security/CVE-2026-9494",
          "url": "https://ubuntu.com/security/CVE-2026-9494"
        }
      ],
      "release_date": "2026-07-16T13:16:00Z",
      "remediations": [
        {
          "category": "none_available",
          "date": "2026-07-17T12:46:24.282480Z",
          "details": "Affected",
          "product_ids": [
            "Ubuntu-18:ubuntu-advantage-pro-1:29.4~18.04+tuxcare.els1.all",
            "Ubuntu-18:ubuntu-advantage-pro-1:32.3~18.04+tuxcare.els1.all",
            "Ubuntu-18:ubuntu-advantage-tools-1:29.4~18.04+tuxcare.els1.amd64",
            "Ubuntu-18:ubuntu-advantage-tools-1:32.3~18.04+tuxcare.els1.all",
            "Ubuntu-18:ubuntu-pro-auto-attach-1:32.3~18.04+tuxcare.els1.all",
            "Ubuntu-18:ubuntu-pro-client-1:32.3~18.04+tuxcare.els1.amd64",
            "Ubuntu-18:ubuntu-pro-client-l10n-1:32.3~18.04+tuxcare.els1.amd64"
          ]
        }
      ]
    }
  ]
}