8.8

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2025-0928

CVE-2025-0928: Arbitrary executable upload via authenticated endpoint

In Juju versions prior to 3.6.8 and 2.9.52, any authenticated controller user was allowed to upload arbitrary agent binaries to any model or to the controller itself, without verifying model membership or requiring explicit permissions. This enabled the distribution of poisoned binaries to new or upgraded machines, potentially resulting in remote code execution.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2025-0928

CVE-2025-0928:

8.8

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
github.com/juju/juju	go	< 0.0.0-20250619215741-4034aa13c7cf	0.0.0-20250619215741-4034aa13c7cf

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is a classic case of improper authorization (CWE-285) within the Juju API server. The analysis of the provided security advisory and the associated patches reveals that the endpoint responsible for uploading agent tools (/tools) was not properly secured.

The core of the issue lies in the apiserver.Server.endpoints function in apiserver/apiserver.go. In its vulnerable state, this function configured the /tools endpoint to use an authorizer that only checked if a user was authenticated (tagKindAuthorizer{names.UserTagKind}). It failed to verify if the authenticated user actually had the administrative permissions required to upload new agent binaries.

This flaw would allow any user with a valid account on the Juju controller, regardless of their permission level, to upload a malicious agent binary. This binary would then be executed by any new machine provisioned on the controller or when an administrator runs an upgrade, leading to a full compromise of the controller and its managed infrastructure.

The provided patches fix this vulnerability by replacing the weak authorizer with a CompositeAuthorizer that correctly enforces administrative privileges (permission.AdminAccess) for the tool upload functionality. The change is evident in the diffs, where tagKindAuthorizer{names.UserTagKind} is replaced by a much stricter set of authorization rules.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.