CVE-2021-3626

Windows version of Multipass unauthenticated localhost tcp control socket can perform mounts

State: Published
Severity: 8.8 High
Published: Oct 1, 2021
Updated: Sep 17, 2024
Reserved: Jun 29, 2021

Description

The Windows version of Multipass before 1.7.0 allowed any local process to connect to the localhost TCP control socket to perform mounts from the operating system to a guest, allowing for privilege escalation.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H	canonical

Weaknesses

CWE-73 External Control of File Name or Path
CWE-284 Improper Access Control

Affected Products

Product	Versions
MultipassCanonical	before 1.7.0Affected

References

https://github.com/canonical/multipass/pull/2150

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.