CVE-2025-68153

CVE-2025-68153 describes a high-severity vulnerability in Juju, an open-source application orchestration engine, affecting versions 2.9 prior to 2.9.56 and 3.6 prior to 3.6.19. This flaw allows any authenticated user, machine, or controller to modify application resources across the entire Juju controller. Rated with a CVSS score of 7.1 (High), it presents a network attack vector with low attack complexity and requires only low privileges, leading to a high integrity impact. There is currently no evidence of active exploitation, nor is public exploit code available, with community discussion limited to a single mention.