CVE-2017-9232

CVE-2017-9232 is a critical privilege escalation vulnerability affecting Canonical Juju versions prior to 1.25.12, 2.0.4, and 2.1.3. The flaw stems from Juju's improper permission settings on a UNIX domain socket, allowing local users to escalate privileges to root. With a CVSS score of 9.8 (Critical), this vulnerability is easily exploitable with low attack complexity and no user interaction required, leading to complete compromise of confidentiality, integrity, and availability. While not currently on the KEV catalog or Hot List, a Metasploit module exists for exploitation, indicating readily available exploit code. Despite its severity and exploit availability, there is no evidence of active exploitation, and it has received minimal community discussion or media coverage.