UBUNTU-CVE-2026-105963: Medium severity ubuntu/sonic-pi vulnerability
Published Nov 3, 2026
·Updated
(Externally-Generated Error Message Containing Sensitive Information vu ...)
Affected Software
7 affected components
ubuntu/sonic-pi*
ubuntu/sonic-pi*
ubuntu/sonic-pi*
ubuntu/sonic-pi*
ubuntu/sonic-pi*
ubuntu/sonic-pi*
ubuntu/sonic-pi*
Event History
Nov 3, 2026
CVE Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Who is realistically exposed to this issue?
The vulnerability is in Ubuntu's sonic-pi package. The supplied vector indicates it is remotely reachable over the network, but exploitation requires high privileges.
2
What access does an attacker need to exploit it?
An attacker needs high privileges before exploitation. No user interaction is required, and the attack complexity is low.
3
What is the expected impact if exploitation succeeds?
The provided severity vector indicates a low impact to confidentiality. It does not indicate integrity or availability impact, including impacts on subsequent systems.