multipass vulnerabilities
CVEs whose affected-version data names the multipass package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-49238High· 8.4An issue was discovered in Canonical Multipass before version 1.16.3
An issue was discovered in Canonical Multipass before version 1.16.3. The host-side SFTP server component (sshfs_server), which executes with root privileges on the host, contains a path containment bypass vulnerability within its valida…
▾ Twilightcanonical · multipassEPSS 0.45%via NVD
CVE-2026-49237High· 7.8An issue was discovered in Canonical Multipass for macOS before version 1.16.3 due to an incomplete fix for CVE-2025-5199
An issue was discovered in Canonical Multipass for macOS before version 1.16.3 due to an incomplete fix for CVE-2025-5199. While the patch in version 1.16.0 updated the ownership of the multipassd daemon binary to root:wheel, five co-loc…
▾ Twilightcanonical · multipassEPSS 0.16%via NVD