- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/12/2026, Multipass recorded 0 security vulnerabilities in the last 90 days, of which 0 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Multipass and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-49238SFTP Server VM Escape in Canonical MultipassCVE-2026-49237Local Privilege Escalation in Canonical MultipassCVE-2025-5199Incorrect default permissions enable local privilege escalation in Canonical Multipass on macOSCVE-2021-3747MacOS version of Multipass incorrect owner for application directoryCVE-2021-3626Windows version of Multipass unauthenticated localhost tcp control socket can perform mounts| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-49238SFTP Server VM Escape in Canonical Multipass | Exploitation statusActively exploited | FixYes | Published05/28/2026 | SeverityHigh |
CVE-2026-49237Local Privilege Escalation in Canonical Multipass | Exploitation statusNot exploited | FixYes | Published05/28/2026 | SeverityHigh |
CVE-2025-5199Incorrect default permissions enable local privilege escalation in Canonical Multipass on macOS | Exploitation statusActively exploited | FixYes | Published07/11/2025 | SeverityHigh |
CVE-2021-3747MacOS version of Multipass incorrect owner for application directory | Exploitation statusNot confirmed | FixYes | Published10/01/2021 | SeverityHigh |
CVE-2021-3626Windows version of Multipass unauthenticated localhost tcp control socket can perform mounts | Exploitation statusNot confirmed | FixYes | Published10/01/2021 | SeverityHigh |
5 Results | Page 1 of 1