CVE-2026-9494 | Canonical ubuntu-pro-client Credentials Validation /usr/lib/apt/apt-helper download-file missing encryption

A vulnerability was found in Canonical ubuntu-pro-client. It has been declared as problematic. The impacted element is the function download-file of the file /usr/lib/apt/apt-helper of the component Credentials Validation. The manipulation results in missing encryption of sensitive data.

This vulnerability was named CVE-2026-9494. The attack needs to be approached locally. There is no available exploit.