[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f-dvpG22OWMemv36Z5qe19LtjjmZ3KEYmzbEpq1OMkbI":3,"g5a-ex:canonical\u002Fcloud-init@*":365,"g5a-family:canonical\u002Fcloud-init":367},{"success":4,"data":5},true,{"product":6,"versions":200,"topVulnerabilitiesByEpss":293,"kevVulnerabilities":342,"seoMetadata":343,"meta":362},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":199},"canonical","cloud-init",92,9,0,"2025-06-26",[14,17,19,21,23,25,27,29,31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,99,101,103,105,107,109,111,113,115,117,119,121,123,125,127,129,131,133,135,137,139,141,143,145,147,149,151,153,155,157,159,161,163,165,167,169,171,173,175,177,179,181,183,185,187,189,191,193,195,197],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.1",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.10",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.11",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.12",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.13",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.14",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.15",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.2",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.3",{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.4",{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.5",{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.6",{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.8",{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},"0.6.0",{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},"0.6.1",{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},"0.6.2",{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},"0.6.3",{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},"0.7.0",{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},"0.7.1",{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},"0.7.2",{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},"0.7.3",{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},"0.7.4",{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},"0.7.5",{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},"0.7.6",{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},"0.7.7",{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},"0.7.8",{"version":70,"cve_count":11,"kev_count":11,"has_kev":16},"0.7.9",{"version":72,"cve_count":11,"kev_count":11,"has_kev":16},"17.1",{"version":74,"cve_count":11,"kev_count":11,"has_kev":16},"17.2",{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},"18.1",{"version":78,"cve_count":11,"kev_count":11,"has_kev":16},"18.2",{"version":80,"cve_count":11,"kev_count":11,"has_kev":16},"18.3",{"version":82,"cve_count":11,"kev_count":11,"has_kev":16},"18.4",{"version":84,"cve_count":11,"kev_count":11,"has_kev":16},"19.1",{"version":86,"cve_count":11,"kev_count":11,"has_kev":16},"19.2",{"version":88,"cve_count":11,"kev_count":11,"has_kev":16},"19.3",{"version":90,"cve_count":11,"kev_count":11,"has_kev":16},"19.4",{"version":92,"cve_count":11,"kev_count":11,"has_kev":16},"20.1",{"version":94,"cve_count":11,"kev_count":11,"has_kev":16},"20.2",{"version":96,"cve_count":11,"kev_count":11,"has_kev":16},"20.3",{"version":98,"cve_count":11,"kev_count":11,"has_kev":16},"20.4",{"version":100,"cve_count":11,"kev_count":11,"has_kev":16},"20.4.1",{"version":102,"cve_count":11,"kev_count":11,"has_kev":16},"21.1",{"version":104,"cve_count":11,"kev_count":11,"has_kev":16},"21.2",{"version":106,"cve_count":11,"kev_count":11,"has_kev":16},"21.3",{"version":108,"cve_count":11,"kev_count":11,"has_kev":16},"21.4",{"version":110,"cve_count":11,"kev_count":11,"has_kev":16},"22.1",{"version":112,"cve_count":11,"kev_count":11,"has_kev":16},"22.2",{"version":114,"cve_count":11,"kev_count":11,"has_kev":16},"22.2.1",{"version":116,"cve_count":11,"kev_count":11,"has_kev":16},"22.2.2",{"version":118,"cve_count":11,"kev_count":11,"has_kev":16},"22.3",{"version":120,"cve_count":11,"kev_count":11,"has_kev":16},"22.3.1",{"version":122,"cve_count":11,"kev_count":11,"has_kev":16},"22.3.2",{"version":124,"cve_count":11,"kev_count":11,"has_kev":16},"22.3.3",{"version":126,"cve_count":11,"kev_count":11,"has_kev":16},"22.3.4",{"version":128,"cve_count":11,"kev_count":11,"has_kev":16},"22.4",{"version":130,"cve_count":11,"kev_count":11,"has_kev":16},"22.4.1",{"version":132,"cve_count":11,"kev_count":11,"has_kev":16},"22.4.2",{"version":134,"cve_count":11,"kev_count":11,"has_kev":16},"23.1",{"version":136,"cve_count":11,"kev_count":11,"has_kev":16},"23.1.1",{"version":138,"cve_count":11,"kev_count":11,"has_kev":16},"23.1.2",{"version":140,"cve_count":11,"kev_count":11,"has_kev":16},"23.2",{"version":142,"cve_count":11,"kev_count":11,"has_kev":16},"23.2.1",{"version":144,"cve_count":11,"kev_count":11,"has_kev":16},"23.2.2",{"version":146,"cve_count":11,"kev_count":11,"has_kev":16},"23.3",{"version":148,"cve_count":11,"kev_count":11,"has_kev":16},"23.3.1",{"version":150,"cve_count":11,"kev_count":11,"has_kev":16},"23.3.2",{"version":152,"cve_count":11,"kev_count":11,"has_kev":16},"23.3.3",{"version":154,"cve_count":11,"kev_count":11,"has_kev":16},"23.4",{"version":156,"cve_count":11,"kev_count":11,"has_kev":16},"23.4.1",{"version":158,"cve_count":11,"kev_count":11,"has_kev":16},"23.4.2",{"version":160,"cve_count":11,"kev_count":11,"has_kev":16},"23.4.3",{"version":162,"cve_count":11,"kev_count":11,"has_kev":16},"23.4.4",{"version":164,"cve_count":11,"kev_count":11,"has_kev":16},"24.1",{"version":166,"cve_count":11,"kev_count":11,"has_kev":16},"24.1.1",{"version":168,"cve_count":11,"kev_count":11,"has_kev":16},"24.1.2",{"version":170,"cve_count":11,"kev_count":11,"has_kev":16},"24.1.3",{"version":172,"cve_count":11,"kev_count":11,"has_kev":16},"24.1.4",{"version":174,"cve_count":11,"kev_count":11,"has_kev":16},"24.1.5",{"version":176,"cve_count":11,"kev_count":11,"has_kev":16},"24.1.6",{"version":178,"cve_count":11,"kev_count":11,"has_kev":16},"24.2",{"version":180,"cve_count":11,"kev_count":11,"has_kev":16},"24.3",{"version":182,"cve_count":11,"kev_count":11,"has_kev":16},"24.3.1",{"version":184,"cve_count":11,"kev_count":11,"has_kev":16},"24.4",{"version":186,"cve_count":11,"kev_count":11,"has_kev":16},"24.4.1",{"version":188,"cve_count":11,"kev_count":11,"has_kev":16},"25.1",{"version":190,"cve_count":11,"kev_count":11,"has_kev":16},"25.1.1",{"version":192,"cve_count":11,"kev_count":11,"has_kev":16},"25.1.2",{"version":194,"cve_count":11,"kev_count":11,"has_kev":16},"25.1.3",{"version":196,"cve_count":11,"kev_count":11,"has_kev":16},"25.1.4",{"version":198,"cve_count":11,"kev_count":11,"has_kev":16},"25.2","Cloud-init by Canonical is a technology product with 92 tracked versions and 9 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},{"version":70,"cve_count":11,"kev_count":11,"has_kev":16},{"version":72,"cve_count":11,"kev_count":11,"has_kev":16},{"version":74,"cve_count":11,"kev_count":11,"has_kev":16},{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},{"version":78,"cve_count":11,"kev_count":11,"has_kev":16},{"version":80,"cve_count":11,"kev_count":11,"has_kev":16},{"version":82,"cve_count":11,"kev_count":11,"has_kev":16},{"version":84,"cve_count":11,"kev_count":11,"has_kev":16},{"version":86,"cve_count":11,"kev_count":11,"has_kev":16},{"version":88,"cve_count":11,"kev_count":11,"has_kev":16},{"version":90,"cve_count":11,"kev_count":11,"has_kev":16},{"version":92,"cve_count":11,"kev_count":11,"has_kev":16},{"version":94,"cve_count":11,"kev_count":11,"has_kev":16},{"version":96,"cve_count":11,"kev_count":11,"has_kev":16},{"version":98,"cve_count":11,"kev_count":11,"has_kev":16},{"version":100,"cve_count":11,"kev_count":11,"has_kev":16},{"version":102,"cve_count":11,"kev_count":11,"has_kev":16},{"version":104,"cve_count":11,"kev_count":11,"has_kev":16},{"version":106,"cve_count":11,"kev_count":11,"has_kev":16},{"version":108,"cve_count":11,"kev_count":11,"has_kev":16},{"version":110,"cve_count":11,"kev_count":11,"has_kev":16},{"version":112,"cve_count":11,"kev_count":11,"has_kev":16},{"version":114,"cve_count":11,"kev_count":11,"has_kev":16},{"version":116,"cve_count":11,"kev_count":11,"has_kev":16},{"version":118,"cve_count":11,"kev_count":11,"has_kev":16},{"version":120,"cve_count":11,"kev_count":11,"has_kev":16},{"version":122,"cve_count":11,"kev_count":11,"has_kev":16},{"version":124,"cve_count":11,"kev_count":11,"has_kev":16},{"version":126,"cve_count":11,"kev_count":11,"has_kev":16},{"version":128,"cve_count":11,"kev_count":11,"has_kev":16},{"version":130,"cve_count":11,"kev_count":11,"has_kev":16},{"version":132,"cve_count":11,"kev_count":11,"has_kev":16},{"version":134,"cve_count":11,"kev_count":11,"has_kev":16},{"version":136,"cve_count":11,"kev_count":11,"has_kev":16},{"version":138,"cve_count":11,"kev_count":11,"has_kev":16},{"version":140,"cve_count":11,"kev_count":11,"has_kev":16},{"version":142,"cve_count":11,"kev_count":11,"has_kev":16},{"version":144,"cve_count":11,"kev_count":11,"has_kev":16},{"version":146,"cve_count":11,"kev_count":11,"has_kev":16},{"version":148,"cve_count":11,"kev_count":11,"has_kev":16},{"version":150,"cve_count":11,"kev_count":11,"has_kev":16},{"version":152,"cve_count":11,"kev_count":11,"has_kev":16},{"version":154,"cve_count":11,"kev_count":11,"has_kev":16},{"version":156,"cve_count":11,"kev_count":11,"has_kev":16},{"version":158,"cve_count":11,"kev_count":11,"has_kev":16},{"version":160,"cve_count":11,"kev_count":11,"has_kev":16},{"version":162,"cve_count":11,"kev_count":11,"has_kev":16},{"version":164,"cve_count":11,"kev_count":11,"has_kev":16},{"version":166,"cve_count":11,"kev_count":11,"has_kev":16},{"version":168,"cve_count":11,"kev_count":11,"has_kev":16},{"version":170,"cve_count":11,"kev_count":11,"has_kev":16},{"version":172,"cve_count":11,"kev_count":11,"has_kev":16},{"version":174,"cve_count":11,"kev_count":11,"has_kev":16},{"version":176,"cve_count":11,"kev_count":11,"has_kev":16},{"version":178,"cve_count":11,"kev_count":11,"has_kev":16},{"version":180,"cve_count":11,"kev_count":11,"has_kev":16},{"version":182,"cve_count":11,"kev_count":11,"has_kev":16},{"version":184,"cve_count":11,"kev_count":11,"has_kev":16},{"version":186,"cve_count":11,"kev_count":11,"has_kev":16},{"version":188,"cve_count":11,"kev_count":11,"has_kev":16},{"version":190,"cve_count":11,"kev_count":11,"has_kev":16},{"version":192,"cve_count":11,"kev_count":11,"has_kev":16},{"version":194,"cve_count":11,"kev_count":11,"has_kev":16},{"version":196,"cve_count":11,"kev_count":11,"has_kev":16},{"version":198,"cve_count":11,"kev_count":11,"has_kev":16},[294,302,309,313,319,323,328,333,337],{"cveId":295,"description":296,"publishedDate":297,"cvssScore":298,"cvssVersion":299,"severity":300,"isKev":16,"epssScore":301},"CVE-2012-6639","An privilege elevation vulnerability exists in Cloud-init before 0.7.0 when requests to an untrusted system are submitted for EC2 instance data.","2019-11-25",8.8,"v3.1","High",0.02049,{"cveId":303,"description":304,"publishedDate":305,"cvssScore":306,"cvssVersion":299,"severity":307,"isKev":16,"epssScore":308},"CVE-2020-8631","cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier for attackers to predict passwords, because rand_str in cloudinit\u002Futil.py calls the random.choice function.","2020-02-05",5.5,"Medium",0.00435,{"cveId":310,"description":311,"publishedDate":305,"cvssScore":306,"cvssVersion":299,"severity":307,"isKev":16,"epssScore":312},"CVE-2020-8632","In cloud-init through 19.4, rand_user_password in cloudinit\u002Fconfig\u002Fcc_set_passwords.py has a small default pwlen value, which makes it easier for attackers to guess passwords.",0.0038,{"cveId":314,"description":315,"publishedDate":316,"cvssScore":317,"cvssVersion":299,"severity":300,"isKev":16,"epssScore":318},"CVE-2018-10896","The default cloud-init configuration, in cloud-init 0.6.2 and newer, included \"ssh_deletekeys: 0\", disabling cloud-init's deletion of ssh host keys. In some environments, this could lead to instances created by cloning a golden master or template system, sharing ssh host keys, and being able to impersonate one another or conduct man-in-the-middle attacks.","2018-08-01",7.1,0.00351,{"cveId":320,"description":321,"publishedDate":12,"cvssScore":298,"cvssVersion":299,"severity":300,"isKev":16,"epssScore":322},"CVE-2024-6174","When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration.",0.00264,{"cveId":324,"description":325,"publishedDate":326,"cvssScore":306,"cvssVersion":299,"severity":307,"isKev":16,"epssScore":327},"CVE-2023-1786","Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use this information to find hashed passwords and possibly escalate their privilege.","2023-04-26",0.00263,{"cveId":329,"description":330,"publishedDate":331,"cvssScore":306,"cvssVersion":299,"severity":307,"isKev":16,"epssScore":332},"CVE-2022-2084","Sensitive data could be exposed in world readable logs of cloud-init before version 22.3 when schema failures are reported. This leak could include hashed passwords.","2023-04-19",0.00236,{"cveId":334,"description":335,"publishedDate":331,"cvssScore":306,"cvssVersion":299,"severity":307,"isKev":16,"epssScore":336},"CVE-2021-3429","When instructing cloud-init to set a random password for a new user account, versions before 21.2 would write that password to the world-readable log file \u002Fvar\u002Flog\u002Fcloud-init-output.log. This could allow a local user to log in as another user.",0.00219,{"cveId":338,"description":339,"publishedDate":12,"cvssScore":340,"cvssVersion":299,"severity":307,"isKev":16,"epssScore":341},"CVE-2024-11584","cloud-init through 25.1.2 includes the systemd socket unit cloud-init-hotplugd.socket with default SocketMode that grants 0666 permissions, making it world-writable. This is used for the \"\u002Frun\u002Fcloud-init\u002Fhook-hotplug-cmd\" FIFO. An unprivileged user could trigger hotplug-hook commands.",5.9,0.00142,[],{"title":344,"metaDescription":345,"keywords":346,"structuredData":347},"Cloud-init by Canonical - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Cloud-init by Canonical covering 92 versions with 9 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Cloud-init vulnerabilities, Cloud-init security, Cloud-init CVE, Canonical Cloud-init, Cloud-init threat intelligence, Canonical security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":348,"@type":349,"name":350,"description":345,"url":351,"manufacturer":352,"applicationCategory":356,"softwareVersion":357,"mainEntity":358},"https:\u002F\u002Fschema.org","SoftwareApplication","Cloud-init","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcanonical\u002Fcloud-init",{"@type":353,"name":354,"url":355},"Organization","Canonical","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fcanonical","Security Software","92 versions tracked",{"@type":359,"name":360,"description":361,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Cloud-init Security Vulnerabilities","Security vulnerabilities affecting Cloud-init by Canonical",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":363,"apiVersion":364},"2026-10-28T14:25:55.637Z","3.0",{"rows":366,"total":11,"capped":16,"failed":11},[],[]]